Lucene search
PRIOn knowledge basePRION:CVE-2022-38117HistoryOct 24, 2022 - 2:15 p.m.
Hardcoded credentials
2022-10-2414:15:00
PRIOn knowledge base
www.prio-n.com
3
hardcoded credentials
aes key
physical attack
android root privilege
user data tampering
Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| juiker | eq | 4.6.0311.1 |
Related
cvelist
cvelist
CVE-2022-38117 Juiker app - Hard-coded Credentials
2022-10-24 00:00:00
nvd
nvd
CVE-2022-38117
2022-10-24 14:15:50
cve
cve
CVE-2022-38117
2022-10-24 14:15:50