{"id":"CVE-2023-22362","aliases":["EUVD-2023-26525","GHSA-39h8-m6rh-4934"],"status":"published","title":"SUSHIRO App for Android outputs sensitive information to the log file, which may result in an...","description":"SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00784,"percentile":0.56487,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2023-02-13T00:00:00Z","modified":"2026-06-17T05:35:10Z","products":[{"vendor":"akindo sushiro co., ltd.","product":"sushiro app for android"},{"vendor":"akindo-sushiro","product":"hong_kong_sushiro"},{"vendor":"akindo-sushiro","product":"singapore_sushiro"},{"vendor":"akindo-sushiro","product":"sushiro"},{"vendor":"akindo-sushiro","product":"taiwan_sushiro"},{"vendor":"akindo-sushiro","product":"thailand_sushiro"}],"references":[{"url":"https://play.google.com/store/apps/details?id=jp.co.akindo_sushiro.sushiroapp","tags":["x_transferred","Product"]},{"url":"https://play.google.com/store/apps/details?id=th.co.akindo_sushiro.sushiroapp","tags":["x_transferred","Product"]},{"url":"https://play.google.com/store/apps/details?id=hk.co.akindo_sushiro.sushiroapp","tags":["x_transferred","Product"]},{"url":"https://play.google.com/store/apps/details?id=sg.co.akindo_sushiro.sushiroapp","tags":["x_transferred","Product"]},{"url":"https://play.google.com/store/apps/details?id=tw.co.akindo_sushiro.sushiroapp","tags":["x_transferred","Product"]},{"url":"https://jvn.jp/en/jp/JVN84642320/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22362"},{"url":"https://jvn.jp/en/jp/JVN84642320"},{"url":"https://github.com/advisories/GHSA-39h8-m6rh-4934"}],"sources":{"cve":[{"id":"CVE-2023-22362","description":"SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1","status":"published","published":"2023-02-13T00:00:00Z","modified":"2025-03-21T14:32:31.724Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:35:15.779187Z"}],"euvd":[{"id":"EUVD-2023-26525","description":"SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1","status":"published","published":"2023-02-13T00:00:00Z","modified":"2025-03-21T14:32:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:52:56.049523Z"}],"ghsa":[{"id":"GHSA-39h8-m6rh-4934","title":"SUSHIRO App for Android outputs sensitive information to the log file, which may result in an...","description":"SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1","status":"published","published":"2023-02-13T03:30:28Z","modified":"2025-03-21T15:32:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:00:23.592031Z"}],"nvd":[{"id":"CVE-2023-22362","description":"SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1","status":"published","published":"2023-02-13T02:21:07.36Z","modified":"2026-06-17T05:35:10.843Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:07:46.811196Z"}]}}