PT-2023-10315 · Line · Line For Android+1

Kenta Suefusa + 2 · Publicado 2023-10-31 · Atualizado 2023-11-08 · CVE-2015-2968

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions LINE@ for Android version 1.0.0 LINE@ for iOS version 1.0.0

Description The issue allows for a man-in-the-middle (MITM) attack due to the application's acceptance of non-SSL/TLS communications. This enables an attacker to invoke any API from a script injected during the attack.

Recommendations For LINE@ for Android version 1.0.0, consider disabling non-SSL/TLS communications to minimize the risk of exploitation. For LINE@ for iOS version 1.0.0, consider disabling non-SSL/TLS communications to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-924

Identificadores relacionados

CVE-2015-2968

Produtos afetados

Line For Android

Line For Ios

Referências · 3

• https://jvn.jp/en/jp/JVN22546110 · Nota
• http://official-blog.line.me/ja/archives/36495925.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-2968 · Nota de Segurança