ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth packets.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.