CVE-2022-46081 Information

Description

In Garmin Connect 4.61 terminating a LiveTrack session wouldn’t prevent the LiveTrack API from continued exposure of private personal information.

Reference

https://www.samwallace.dev/research/Harvesting%20Emails%20with%20Expired%20Garmin%20LiveTrack%20Sessions

Share on: