CVE-2023-47370: Weak Encryption

Published Nov 9, 2023

Updated

The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to victims.

Affected Software

1 affected component

linecorp Line=13.6.1

Event History

Nov 9, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-47370?

CVE-2023-47370 is a vulnerability that allows remote attackers to send malicious notifications to victims by leaking the channel access token in bluetrick Line 13.6.1.

How severe is CVE-2023-47370?

CVE-2023-47370 has a severity value of 6.5, which is considered medium severity.

How does CVE-2023-47370 affect Line 13.6.1?

CVE-2023-47370 affects Line 13.6.1 by allowing the leakage of the channel access token, which can be exploited by remote attackers to send malicious notifications.

Is there a fix available for CVE-2023-47370?

At the moment, there is no information available about a fix for CVE-2023-47370. It is recommended to stay updated and follow the official sources for any patches or updates.

Is CVE-2023-47370 related to any known Common Weakness Enumeration (CWE)?

Yes, CVE-2023-47370 is related to CWE-326, which is the category for insecure storage of sensitive information.