CVE-2023-22362
High
Description
SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1
SeverityHigh
CVSS7.5
Exploit probability—
ProductAkindo-sushiro Hong Kong Sushiro
PublishedFeb 13, 2023
First seenFeb 13, 2023
Weakness typeCWE-532CWE-532
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| akindo-sushiro hong_kong_sushiro | 3.0.3 | — |
| akindo-sushiro singapore_sushiro | 2.0.3 | — |
| akindo-sushiro sushiro | 4.0.31 | — |
| akindo-sushiro taiwan_sushiro | 2.0.3 | — |
| akindo-sushiro thailand_sushiro | 2.0.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.