CVE-2018-13446

An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the...

CVE-2018-13446

The LINE jp.naver.line Android app (version 8.8.1) contains an authentication bypass in the Passcode feature: runtime manipulation can cause a method to return true, letting an attacker authenticate with an arbitrary passcode. Root cause details are not fully disclosed in the provided documents. ...

CVE-2018-13435

The CVE-2018-13435 entry applies to the LINE jp.naver.line iOS app (version 8.8.0). A vulnerability in the Passcode feature allows authentication bypass via runtime manipulation that forces a method to disable passcode authentication. This is a local issue with high impact (per CVSS), effectively...