CVE-2022-38117

🗓️ 24 Oct 2022 13:21:03Reported by twcertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 45 Views

Juiker app hard-coded AES key in source code, allowing physical attackers to decrypt & tamper with user data

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-38117	24 Oct 202218:25	–	circl
CNNVD	Juiker 信任管理问题漏洞	24 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-38117 Juiker app - Hard-coded Credentials	24 Oct 202213:21	–	cvelist
EUVD	EUVD-2022-40719	3 Oct 202520:07	–	euvd
NVD	CVE-2022-38117	24 Oct 202214:15	–	nvd
OSV	CVE-2022-38117	24 Oct 202214:15	–	osv
Prion	Hardcoded credentials	24 Oct 202214:15	–	prion
Vulnrichment	CVE-2022-38117 Juiker app - Hard-coded Credentials	24 Oct 202213:21	–	vulnrichment

NVD

Vulners

Node

juiker juikerMatch4.6.0311.1android

[
  {
    "vendor": "Juiker",
    "product": "Juiker app",
    "versions": [
      {
        "version": "4.6.0311.1",
        "status": "affected"
      }
    ]
  }
]