TLS Certificate Verification Flaw in LINE Client for iOS
CVE-2023-5554

4.8MEDIUM

Key Information:

Vendor: Line Corporation
Status: Line Client For iOS
Vendor: CVE Published:; 12 October 2023

🔔 Create Line Corporation Vulnerability Alert

What is CVE-2023-5554?

A significant vulnerability exists in the LINE Client for iOS, specifically in the log transmission of its financial module. The lack of TLS certificate verification leaves log data susceptible to interception and manipulation. This oversight could potentially allow unauthorized access to sensitive financial information transmitted through the application, posing risks to user privacy and data integrity.

Affected Version(s)

LINE Client for iOS 13.12.0 < 13.16.0

References

https://hackerone.com/reports/2106827

CVSS V3.1

Score:

4.8

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 12, 2023
Vulnerability Reserved
Oct 12, 2023