Ichiran App for iOS versions prior to 3.1.0 and Ichiran...
Moderate severity
Unreviewed
Published
Feb 13, 2023
to the GitHub Advisory Database
•
Updated Mar 4, 2023
Description
Published by the National Vulnerability Database
Feb 13, 2023
Published to the GitHub Advisory Database
Feb 13, 2023
Last updated
Mar 4, 2023
Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.
References