twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including auth tokens, can be sniffed. Version 2.4.1 has a patch for this issue.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-08-04T16:18:15.288Z
Updated: 2023-08-04T16:18:15.288Z
Reserved: 2023-07-24T16:19:28.363Z
Link: CVE-2023-38688
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-08-04T17:15:10.097
Modified: 2023-08-09T21:05:36.740
Link: CVE-2023-38688
JSON object: View
Redhat Information
No data.
CWE