TronLink Wallet Log Information Disclosure Vulnerability

TronLink Wallet is a cryptocurrency wallet application. A log information disclosure vulnerability exists in TronLink Wallet version 2.2.0, which originates when the CreateWalletTwoActivity class is called and the program stores the user's password in a log via the registry, which can be exploite...

CVE-2019-13098: Insertion of Sensitive Information into Log File

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 Jel...

PT-2019-13124

Name of the Vulnerable Software and Affected Versions TronLink Wallet version 2.2.0 Description The issue concerns the storage of user passwords in logs when the CreateWalletTwoActivity class is called via the registration form. This allows other authenticated users to read the password from the...