PT-2023-18457 · Unknown · Sushiro App For Android
Published
2023-02-13
·
Updated
2025-03-21
·
CVE-2023-22362
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SUSHIRO App for Android version 4.0.31
Thailand SUSHIRO App for Android version 1.0.0
Hong Kong SUSHIRO App for Android version 3.0.2
Singapore SUSHIRO App for Android version 2.0.0
Taiwan SUSHIRO App for Android version 2.0.1
Description
The SUSHIRO App for Android has an issue where it outputs sensitive information to the log file. This could potentially allow an attacker to obtain credential information from the log file.
Recommendations
For SUSHIRO App for Android version 4.0.31, update to a version that does not output sensitive information to the log file.
For Thailand SUSHIRO App for Android version 1.0.0, update to a version that does not output sensitive information to the log file.
For Hong Kong SUSHIRO App for Android version 3.0.2, update to a version that does not output sensitive information to the log file.
For Singapore SUSHIRO App for Android version 2.0.0, update to a version that does not output sensitive information to the log file.
For Taiwan SUSHIRO App for Android version 2.0.1, update to a version that does not output sensitive information to the log file.
Fix
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sushiro App For Android