MITM Vulnerability in LINE@ for Android and iOS by LINE Corporation

CVE-2015-2968

What is CVE-2015-2968?

LINE@ for Android and iOS versions 1.0.0 are susceptible to a serious vulnerability that permits man-in-the-middle (MITM) attacks. This issue arises because the application does not enforce SSL/TLS for its communications, which can allow an attacker to intercept and manipulate traffic between the client and the server. Consequently, any API can be compromised through scripts injected by malicious actors. Users of these apps should prioritize the immediate update of their applications to secure their data against potential intrusions.

References