CVE Feed

    Dashboard / CVE / CVE-2023-22362

    CVE-2023-22362

    SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1

    Published:Feb 13, 2023
    Last Modified:Mar 21, 2025
    EPS:Feb 13, 2023
    EPSS Score:0.00147
    CVSS Score:7.5

    Affected Products

    Vendor
    Akindo-sushiro
    Product
    Hong Kong Sushiro
    Vendor
    Akindo-sushiro
    Product
    Singapore Sushiro
    Vendor
    Akindo-sushiro
    Product
    Sushiro
    Vendor
    Akindo-sushiro
    Product
    Taiwan Sushiro
    Vendor
    Akindo-sushiro
    Product
    Thailand Sushiro

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-215 Fuzzing for application mapping

    References

    https://jvn.jp/en/jp/JVN84642320/
    https://play.google.com/store/apps/details?id=hk.co.akindo_sushiro.sushiroapp
    https://play.google.com/store/apps/details?id=jp.co.akindo_sushiro.sushiroapp
    https://play.google.com/store/apps/details?id=sg.co.akindo_sushiro.sushiroapp
    https://play.google.com/store/apps/details?id=th.co.akindo_sushiro.sushiroapp
    https://play.google.com/store/apps/details?id=tw.co.akindo_sushiro.sushiroapp
    https://jvn.jp/en/jp/JVN84642320/
    https://play.google.com/store/apps/details?id=hk.co.akindo_sushiro.sushiroapp
    https://play.google.com/store/apps/details?id=jp.co.akindo_sushiro.sushiroapp
    https://play.google.com/store/apps/details?id=sg.co.akindo_sushiro.sushiroapp
    https://play.google.com/store/apps/details?id=th.co.akindo_sushiro.sushiroapp
    https://play.google.com/store/apps/details?id=tw.co.akindo_sushiro.sushiroapp

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High