Description
Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs.
Published: 2025-07-22
Score: 2.4 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-22295 Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs.
References
Link Providers
https://jvn.jp/en/jp/JVN07825095/ cve-icon cve-icon
History

Tue, 22 Jul 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Jul 2025 05:00:00 +0000

Type Values Removed Values Added
Description Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs.
Weaknesses CWE-532
References
Metrics cvssV3_0

{'score': 2.4, 'vector': 'CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

cvssV4_0

{'score': 2.4, 'vector': 'CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2025-07-22T15:36:00.332Z

Reserved: 2025-07-15T01:02:40.018Z

Link: CVE-2025-52580

cve-icon Vulnrichment

Updated: 2025-07-22T15:35:55.909Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-07-22T05:15:40.910

Modified: 2025-07-22T13:05:40.573

Link: CVE-2025-52580

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses