Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Juiker Component: Juiker Clear all filters
TI-2022-18435 CVE-2022-39043 · GHSA-whvh-7626-25qp

Juiker app - Information Leakage

Priority LOW 12

Juiker app stores debug logs which contains sensitive information to mobile external storage.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00256 Published 2023-03-27 No fix listed CWE-200
TI-2022-17824 CVE-2022-38117 · GHSA-2wjq-7fcc-4p8f

Juiker app - Hard-coded Credentials

Priority LOW 27

Juiker app hard-coded its AES key in the source code.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00296 Published 2022-10-24 No fix listed CWE-798
TI-2014-05532 CVE-2014-6693 · GHSA-9m8q-vpg8-675f

The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509…

Priority LOW 24

The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00297 Published 2014-09-24 No fix listed CWE-310