CVE-2022-39043

Juiker app suffers an information disclosure vulnerability caused by storing debug logs on the mobile device’s external storage. Multiple sources describe that an unauthenticated physical attacker could access these logs and obtain partial user information (e.g., personal contacts). Some reports ...

CVE-2022-38117

The CVE-2022-38117 entry describes Juiker app hard-coding an AES key in its source code. A to-the-point consequence is that a physical attacker who gains Android root privileges can use the embedded key to decrypt users’ ciphertext and tamper with it. The connected documents confirm the root-caus...

CVE-2014-6693

The CVE-2014-6693 entry concerns the Juiker (aka org.itri) Android application, version 3.2.0829.1, which fails to verify X.509 SSL certificates when connecting to servers. Root cause is lack of certificate verification, enabling man-in-the-middle attackers to spoof legitimate servers and obtain ...