Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Tronlink records in CISA KEVNo Tronlink vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 44
TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01144 · Published 2019-07-22 · No fix listed CWE-312
Priority LOW 32
The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0134 · Published 2019-07-22 · No fix listed CWE-532
