title: Juiker app - Information Leakage
description: Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts.
problem types: CWE-200 Information Exposure
affected:
{
vendor: Juiker
product: Juiker app
versions:
version: 4.6.0607.1, status: affected
platforms: Android
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: PHYSICAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 2.4
baseSeverity: LOW
]
solutions: Update Juiker app version to 4.6.1223.1