CVE-2023-22367

State: Published
Severity: 5.9 Medium
Published: Feb 13, 2023
Updated: Mar 21, 2025
Reserved: Dec 28, 2022

Description

Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.

Scores

CVSS	Score	Vector	Source
3.1	5.9 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
Ichiran App for iOS and Ichiran App for AndroidBetrend Corporation and ICHIRAN INC.	Ichiran App for iOS versions prior to 3.1.0, and Ichiran App for Android versions prior to 3.1.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.