CVE Daily

CVE-2022-46081

In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the Liv...

High CVSS 7.5

Overview

In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information. NOTE: this is disputed by the vendor because the LiveTrack API service is not a customer-controlled product.

CWE: CWE-200 Published: 2023-01-04T04:15:09.837
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags