Information Exposure in Watch Active Plugin for Samsung Devices

CVE-2022-25828

What is CVE-2022-25828?

The Watch Active Plugin prior to version 2.2.07.22012751 contains a vulnerability that permits unauthorized access to sensitive log data. Specifically, it allows an attacker to retrieve password information for connected WiFi access points, leading to potential information exposure. This weakness underscores the importance of keeping software up to date to mitigate such risks.

References