CVE-2023-22367

Published: Feb 13, 2023Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.

Affected (2)

Products: Ichiranusa: Ichiran

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ichiranusa Ichiran	Before 3.1.0
Ichiranusa Ichiran	Before 3.1.0

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (6)

https://apps.apple.com/jp/app/%E4%B8%80%E8%98%AD%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id1118806170

Source: vultures@jpcert.or.jp

Product

https://jvn.jp/en/jp/JVN11257333/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://play.google.com/store/apps/details?id=jp.co.ichiran.app&hl=ja

Source: vultures@jpcert.or.jp

Product

https://apps.apple.com/jp/app/%E4%B8%80%E8%98%AD%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id1118806170

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://jvn.jp/en/jp/JVN11257333/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://play.google.com/store/apps/details?id=jp.co.ichiran.app&hl=ja

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.