CVE-2015-2968

2023-10-3109:29:06

jpcert

www.cve.org

line@

android

ios

mitm

ssl/tls

communications

vulnerability

attack

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

JSON

LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.

CNA Affected

[
  {
    "vendor": "LINE Corporation",
    "product": "LINE@ for Android",
    "versions": [
      {
        "version": "version 1.0.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "LINE Corporation",
    "product": "LINE@ for iOS",
    "versions": [
      {
        "version": "version 1.0.0",
        "status": "affected"
      }
    ]
  }
]