Vulnerability · Published Mar 27, 2023 · Assigned by twcert
CVE-2022-39043Juiker app - Information Leakage
Low 2.4
In plain English
A low-severity information exposure in Juiker app from Juiker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Severity (CVSS 3.1)2.4Low
Exploit odds (30 days)0.3%top 82.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Juiker | Juiker app | 4.6.0607.1 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N