CVE-2021-25422

Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25423

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log...

CVE-2021-25421

Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25420

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25421

Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

Input validation

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

Input validation

Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

Input validation

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log...

Input validation

Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25420

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25422

Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

CVE-2021-25423

The CVE-2021-25423 entry concerns Samsung Watch Active2 PlugIn before version 2.2.08.21033151, where improper log management can cause a logged Wi‑Fi password from the user’s smartphone to be leaked by attackers with log permissions. Affected component is the Watch Active2 PlugIn (Sony?) on weara...

CVE-2021-25423

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log...

CVE-2021-25422

CVE-2021-25422 affects Samsung Watch Active PlugIn prior to version 2.2.07.21033151. The issue is described as an improper log management flaw that allows an attacker with log permissions to exfiltrate the Wi‑Fi password of a connected smartphone via logs. Documents consistently identify the affe...

CVE-2021-25420

CVE-2021-25420 affects Galaxy Watch PlugIn before version 2.2.05.21033151. Root cause: improper log management. Impact: an attacker with log permissions can leak the Wi‑Fi password connected to the user’s smartphone via logs. Remediation: upgrade to 2.2.05.21033151 or newer (per provided document...

CVE-2021-25421

The CVE-2021-25421 entry concerns the Samsung Galaxy Watch3 PlugIn. Affected component: Galaxy Watch3 PlugIn prior to version 2.2.09.21033151. Root cause: improper log management that can cause sensitive data to be written to logs. Impact: an attacker with log permissions could leak the Wi‑Fi pas...

CVE-2021-25421

Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log...

Logic Flaw Vulnerability in NetMizer Log Management System of Beijing Lingzhou Network Technology Co.

NetMizer Log Management System is a system that records all session logs flowing through the device and transmits them to an external management center. A logic flaw vulnerability exists in the NetMizer Log Management System of Beijing LingZhou Network Technology Co. Ltd, which can be exploited b...

Information Disclosure

github.com/argoproj/argo-cd is vulnerable to information disclosure. Credentials used for accessing the remote Helm OCI repository are leaked to anyone with access to the pod logs via access with appropriate permissions to the Kubernetes control plane or a third party log management system becaus...

GHSA-6W87-G839-9WV7 Helm OCI credentials leaked into Argo CD logs

Impact When Argo CD was connected to a Helm OCI repository with authentication enabled, the credentials used for accessing the remote repository were logged. Anyone with access to the pod logs - either via access with appropriate permissions to the Kubernetes control plane or a third party log...