PT-2018-11822 · Naver · Line

Parameth Eimsongsak + 1 · Published 2018-08-16 · Updated 2024-08-05 · CVE-2018-13435

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LINE jp.naver.line application version 8.8.0 for iOS

Description An issue in the LINE application allows authentication bypass via runtime manipulation that forces a certain method to disable passcode authentication. The vendor notes that this issue is not considered significant within their threat model, specifically excluding iOS devices that have been jailbroken.

Recommendations For version 8.8.0, consider disabling the Passcode feature as a temporary workaround until a patch is available. Restrict access to sensitive features that rely on passcode authentication to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-13435

Affected Products

Line

References · 3

• 🔥 https://gist.github.com/tanprathan/19165c43ade898ab8b664098fb171f49 · Exploit
• https://osv.dev/vulnerability/CVE-2018-13435 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13435 · Security Note