← Database

CVE-2022-38117

MEDIUM CVSS: 5.5 Published: 2022-10-24 Modified: 2026-06-17

Description

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it.

Affected Platforms

Juiker Juiker

Weakness Type

CWE-798, CWE-798

References