Nobuaki Nakazawa

**Name of the Vulnerable Software and Affected Versions** LINE for Android versions 5.0.2 and earlier LINE for iOS versions 5.0.0 and earlier **Description** The issue allows for a man-in-the-middle (MITM) attack because the application permits non-SSL/TLS communications. This enables an attacker to invoke any API from a script injected during the attack. **Recommendations** For LINE for Android versions 5.0.2 and earlier, update to a version that enforces SSL/TLS communications to prevent MITM attacks. For LINE for iOS versions 5.0.0 and earlier, update to a version that enforces SSL/TLS communications to prevent MITM attacks.

**Name of the Vulnerable Software and Affected Versions** LINE@ for Android version 1.0.0 LINE@ for iOS version 1.0.0 **Description** The issue allows for a man-in-the-middle (MITM) attack due to the application's acceptance of non-SSL/TLS communications. This enables an attacker to invoke any API from a script injected during the attack. **Recommendations** For LINE@ for Android version 1.0.0, consider disabling non-SSL/TLS communications to minimize the risk of exploitation. For LINE@ for iOS version 1.0.0, consider disabling non-SSL/TLS communications to minimize the risk of exploitation.