CVE Vulnerabilities

CVE-2023-43297

Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Published: Oct 02, 2023 | Modified: Oct 04, 2023
CVSS 3.x
5.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.

Weakness

The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.

Affected Software

Name Vendor Start Version End Version
Line Linecorp 13.6.1 (including) 13.6.1 (including)

References