PT-2023-18851

CVE-2023-23131

·

Published

2023-02-01

·

Updated

2023-02-08

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Selfwealth iOS mobile App version 3.3.1
Description The issue concerns Insecure App Transport Security (ATS) Settings in the Selfwealth iOS mobile App. This means the app may not properly secure its communication, potentially allowing for interception or eavesdropping of sensitive data.
Recommendations For Selfwealth iOS mobile App version 3.3.1, consider updating the app's transport security settings to ensure all communications are properly encrypted and secure. As a temporary workaround, restrict the use of the app on unsecured networks until a more secure version is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾