PT-2023-10184 · Line · Line For Ios+1

Kenta Suefusa + 2 · Published 2023-10-31 · Updated 2023-11-08 · CVE-2015-0897

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions LINE for Android versions 5.0.2 and earlier LINE for iOS versions 5.0.0 and earlier

Description The issue allows for a man-in-the-middle (MITM) attack because the application permits non-SSL/TLS communications. This enables an attacker to invoke any API from a script injected during the attack.

Recommendations For LINE for Android versions 5.0.2 and earlier, update to a version that enforces SSL/TLS communications to prevent MITM attacks. For LINE for iOS versions 5.0.0 and earlier, update to a version that enforces SSL/TLS communications to prevent MITM attacks.

Fix

Weakness Enumeration

CWE-924

Related Identifiers

CVE-2015-0897

Affected Products

Line For Android

Line For Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0897 · Security Note
• http://official-blog.line.me/ja/archives/24809761.html · Vendor Advisory
• https://jvn.jp/en/jp/JVN41281927 · Note