Description
Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Betrend Corporation and ICHIRAN | Ichiran App for iOS and Ichiran App for Android | Ichiran App for iOS versions prior to 3.1.0, and Ichiran App for Android versions prior to 3.1.0 | — |