CVE-2022-39043

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts.

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200 CWE-532 CWE-922

Affected software

Vendor	Product	Versions
Juiker	Juiker app	4.6.0607.1

References

https://www.twcert.org.tw/tw/cp-132-6922-4a37a-1.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-6922-4a37a-1.htmlThird Party Advisory

Timeline

Published: Mar 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-390446.8Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege t CVE-2022-390458.8A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted H CVE-2022-390465.3An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes,CVE-2022-390478.8Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack CVE-2022-390486.1A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an attacker would need to p CVE-2022-390494.8An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS.CVE-2022-390504.8An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other CVE-2022-390518.8Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party packag CVE-2022-390526.5An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system CVE-2022-390536.1Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (CVE-2022-390546.1Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attac CVE-2022-390555.3RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to