PT-2023-10315 · Line · Line For Android+1

Kenta Suefusa + 2 · Published 2023-10-31 · Updated 2023-11-08 · CVE-2015-2968

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions LINE@ for Android version 1.0.0 LINE@ for iOS version 1.0.0

Description The issue allows for a man-in-the-middle (MITM) attack due to the application's acceptance of non-SSL/TLS communications. This enables an attacker to invoke any API from a script injected during the attack.

Recommendations For LINE@ for Android version 1.0.0, consider disabling non-SSL/TLS communications to minimize the risk of exploitation. For LINE@ for iOS version 1.0.0, consider disabling non-SSL/TLS communications to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-924

Related Identifiers

CVE-2015-2968

Affected Products

Line For Android

Line For Ios

References · 3

• http://official-blog.line.me/ja/archives/36495925.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-2968 · Security Note
• https://jvn.jp/en/jp/JVN22546110 · Note