PT-2023-18851 · Selfwealth · Selfwealth Ios Mobile App

L00Neyhacker · Publicado 2023-02-01 · Atualizado 2023-02-08 · CVE-2023-23131

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Selfwealth iOS mobile App version 3.3.1

Description The issue concerns Insecure App Transport Security (ATS) Settings in the Selfwealth iOS mobile App. This means the app may not properly secure its communication, potentially allowing for interception or eavesdropping of sensitive data.

Recommendations For Selfwealth iOS mobile App version 3.3.1, consider updating the app's transport security settings to ensure all communications are properly encrypted and secure. As a temporary workaround, restrict the use of the app on unsecured networks until a more secure version is available.

Exploit

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2023-23131

Produtos afetados

Selfwealth Ios Mobile App

Referências · 5

• 🔥 https://github.com/l00neyhacker/CVE-2023-23131 · Exploit
• https://t.me/cibsecurity/57289 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-23131 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-23131 · Nota de Segurança
• https://t.me/cvenotify/43933 · Publicação no Telegram