Improper authorization in Samsung Pass before 1.0.00.33 allows physical malicious users to acess account list without authentication.
samsung samsung pass