Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical malicious users to access account list without authentication.
samsung samsung pass