CVE-2015-0897 LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a re...
MediumCVSS 5.9
EPSS 0.22%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| LINE@ for Android | = version 5.0.2 and earlier | No fix listed |
| LINE@ for iOS | = version 5.0.0 and earlier | No fix listed |
| line | <= 5.0.0 | No fix listed |
| line | <= 5.0.2 | No fix listed |
References
- official-blog.line.me vendor-advisory
- jvn.jp third-party-advisory