CVE-2018-0518

LINE for iOS (versions 7.1.3–7.1.5) fails to verify SSL server certificates, enabling MITM via a crafted certificate. The root cause is certificate validation being bypassed due to a vulnerability in a Third Party SDK incorporated in the app. Impact: attackers could spoof servers and access sensi...