CVE-2015-2968 LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be i...
MediumCVSS 5.9
EPSS 0.22%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| LINE@ for Android | = version 1.0.0 | No fix listed |
| LINE@ for iOS | = version 1.0.0 | No fix listed |
| line | = 1.0.0 | No fix listed |
References
- official-blog.line.me vendor-advisory
- jvn.jp third-party-advisory