CVE-2023-22367 (published 2023-02-13T00:00:00)
Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.
Affected products: Vendor: Betrend Corporation and ICHIRAN INC.
Product: Ichiran App for iOS and Ichiran App for Android
Versions: Ichiran App for iOS versions prior to 3.1.0, and Ichiran App for Android versions prior to 3.1.0