Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.
The product logs too much information, making log files hard to process and possibly hindering recovery efforts or forensic analysis after an attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Watch_active_plugin | Samsung | * | 2.2.07.21033151 (excluding) |