CVE-2022-41986

2022-10-2400:00:00

jpcert

www.cve.org

information disclosure

iij smartkey

android app

vulnerability

one-time password

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

48.7%

JSON

Information disclosure vulnerability in Android App ‘IIJ SmartKey’ versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions.

CNA Affected

[
  {
    "vendor": "Internet Initiative Japan Inc.",
    "product": "IIJ SmartKey",
    "versions": [
      {
        "version": "versions prior to 2.1.4",
        "status": "affected"
      }
    ]
  }
]