CVE-2019-13098

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called

published July 22, 2019

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 (Jelly Bean), the log data is not sandboxed per application; any application installed on the device has the capability to read data logged by other applications.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01340 · 71.1th percentile
Published
2019-07-22T15:52Z
EPSS history
Timeline
  • 22 JUL 15:52Z
    The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called
    cvelistv5