CVE-2023-39732: High severity linecorp tokueimaru waiting vulnerability
Published Oct 24, 2023
·Updated
The leakage of the client secret in Tokueimaruwaiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.
Affected Software
1 affected component
linecorp Tokueimaru Waiting=13.6.1
Event History
Oct 24, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-39732?
CVE-2023-39732 is a vulnerability in Tokueimaru_waiting Line 13.6.1 that allows attackers to obtain the channel access token and send crafted broadcast messages.
2
How severe is CVE-2023-39732?
CVE-2023-39732 has a severity rating of 8.2, which is considered high.
3
How can attackers exploit CVE-2023-39732?
Attackers can exploit CVE-2023-39732 by leaking the client secret and obtaining the channel access token to send crafted broadcast messages.
4
What software versions are affected by CVE-2023-39732?
CVE-2023-39732 affects Linecorp Tokueimaru Waiting 13.6.1.
5
How can I fix CVE-2023-39732?
To fix CVE-2023-39732, it is recommended to update Tokueimaru_waiting Line to a version that is not affected by the vulnerability.