PT-2023-10184
CVE-2015-0897
·
تاريخ النشر
2023-10-31
·
تاريخ التحديث
2023-11-08
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
LINE for Android versions 5.0.2 and earlier
LINE for iOS versions 5.0.0 and earlier
Description
The issue allows for a man-in-the-middle (MITM) attack because the application permits non-SSL/TLS communications. This enables an attacker to invoke any API from a script injected during the attack.
Recommendations
For LINE for Android versions 5.0.2 and earlier, update to a version that enforces SSL/TLS communications to prevent MITM attacks.
For LINE for iOS versions 5.0.0 and earlier, update to a version that enforces SSL/TLS communications to prevent MITM attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾