What is CVE-2019-13098?

CVE-2019-13098 is a medium-severity vulnerability in Google Android, classified under Insertion of Sensitive Information into Log File. CVSS score: 6.5/10. Published 2019-07-22.

How severe is CVE-2019-13098?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2019-13098 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Google Android

CVE-2019-13098

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on…

EPSS: 0.013 (67.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Google Android
Tronlink Wallet — versions 2.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

Public proof-of-concept exploits

enderphan94/CVE

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-13098?: CVE-2019-13098 is a medium-severity vulnerability in Google Android, classified under Insertion of Sensitive Information into Log File. CVSS score: 6.5/10. Published 2019-07-22.
How severe is CVE-2019-13098?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2019-13098 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.