TI-2022-17824 CVE-2022-38117 · GHSA-2wjq-7fcc-4p8f
Juiker app - Hard-coded Credentials
Priority LOW 27
Juiker app hard-coded its AES key in the source code.
No Juiker vulnerabilities are listed in CISA KEV.
3 records in Juiker · all components
Juiker app hard-coded its AES key in the source code.
The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c…
Juiker app stores debug logs which contains sensitive information to mobile external storage.