PT-2023-18457 · Unknown · Sushiro App For Android

Publicado 2023-02-13 · Atualizado 2025-03-21 · CVE-2023-22362

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SUSHIRO App for Android version 4.0.31 Thailand SUSHIRO App for Android version 1.0.0 Hong Kong SUSHIRO App for Android version 3.0.2 Singapore SUSHIRO App for Android version 2.0.0 Taiwan SUSHIRO App for Android version 2.0.1

Description The SUSHIRO App for Android has an issue where it outputs sensitive information to the log file. This could potentially allow an attacker to obtain credential information from the log file.

Recommendations For SUSHIRO App for Android version 4.0.31, update to a version that does not output sensitive information to the log file. For Thailand SUSHIRO App for Android version 1.0.0, update to a version that does not output sensitive information to the log file. For Hong Kong SUSHIRO App for Android version 3.0.2, update to a version that does not output sensitive information to the log file. For Singapore SUSHIRO App for Android version 2.0.0, update to a version that does not output sensitive information to the log file. For Taiwan SUSHIRO App for Android version 2.0.1, update to a version that does not output sensitive information to the log file.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2023-22362

Produtos afetados

Sushiro App For Android

Referências · 9

• https://play.google.com/store/apps/details?id=jp.co.akindo_sushiro.sushiroapp · Nota
• https://play.google.com/store/apps/details?id=sg.co.akindo_sushiro.sushiroapp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-22362 · Nota de Segurança
• https://play.google.com/store/apps/details?id=tw.co.akindo_sushiro.sushiroapp · Nota
• https://play.google.com/store/apps/details?id=th.co.akindo_sushiro.sushiroapp · Nota
• https://play.google.com/store/apps/details?id=hk.co.akindo_sushiro.sushiroapp · Nota
• https://t.me/cvenotify/115657 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-22362 · Aviso do Fabricante
• https://jvn.jp/en/jp/JVN84642320 · Nota