CVE-2022-39043

Published Mar 27, 2023

Last updated a year ago

Overview

Description: Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts.
Source: twcert@cert.org.tw
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 2.4
Impact score: 1.4
Exploitability score: 0.9
Vector string: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity: LOW

Weaknesses

nvd@nist.gov: CWE-532
twcert@cert.org.tw: CWE-200

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:juiker:juiker:4.6.0607.1:*:*:*:*:android:*:*",
            "vulnerable": true,
            "matchCriteriaId": "61459BC8-7463-4988-A429-2A1BF03684BE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References