CVE-2019-13098

CVE-2019-13098 describes a vulnerability in TronLink Wallet 2.2.0 on Android where user passwords entered during registration are logged in plain text. This allows other authenticated users or, on older Android versions, any installed application to read the password from the device logs. Rated Medium severity (CVSS 6.5), the vulnerability has a high impact on confidentiality due to the exposure of sensitive user credentials, but requires local access or a malicious application. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.