CVE-2023-22362

2023-02-1300:00:00

jpcert

www.cve.org

sushiro app

android

sensitive information

log file

attacker

credential information

thailand

hong kong

singapore

taiwan

EPSS

0.002

Percentile

55.3%

JSON

SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1

CNA Affected

[
  {
    "vendor": "AKINDO SUSHIRO CO., LTD.",
    "product": "SUSHIRO App for Android",
    "versions": [
      {
        "version": "SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1",
        "status": "affected"
      }
    ]
  }
]