PT-2018-11822 · Naver · Line

Parameth Eimsongsak + 1 · Publicado 2018-08-16 · Atualizado 2024-08-05 · CVE-2018-13435

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LINE jp.naver.line application version 8.8.0 for iOS

Description An issue in the LINE application allows authentication bypass via runtime manipulation that forces a certain method to disable passcode authentication. The vendor notes that this issue is not considered significant within their threat model, specifically excluding iOS devices that have been jailbroken.

Recommendations For version 8.8.0, consider disabling the Passcode feature as a temporary workaround until a patch is available. Restrict access to sensitive features that rely on passcode authentication to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-13435

Produtos afetados

Line

Referências · 3

• 🔥 https://gist.github.com/tanprathan/19165c43ade898ab8b664098fb171f49 · Exploit
• https://osv.dev/vulnerability/CVE-2018-13435 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-13435 · Nota de Segurança