PT-2023-18851 · Selfwealth · Selfwealth Ios Mobile App

L00Neyhacker · Published 2023-02-01 · Updated 2023-02-08 · CVE-2023-23131

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Selfwealth iOS mobile App version 3.3.1

Description The issue concerns Insecure App Transport Security (ATS) Settings in the Selfwealth iOS mobile App. This means the app may not properly secure its communication, potentially allowing for interception or eavesdropping of sensitive data.

Recommendations For Selfwealth iOS mobile App version 3.3.1, consider updating the app's transport security settings to ensure all communications are properly encrypted and secure. As a temporary workaround, restrict the use of the app on unsecured networks until a more secure version is available.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2023-23131

Affected Products

Selfwealth Ios Mobile App

References · 5

• 🔥 https://github.com/l00neyhacker/CVE-2023-23131 · Exploit
• https://osv.dev/vulnerability/CVE-2023-23131 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23131 · Security Note
• https://t.me/cibsecurity/57289 · Telegram Post
• https://t.me/cvenotify/43933 · Telegram Post