CVE-2015-2968 — LINE Corporation / LINE@ for Android

Description (CNA)

LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.

Affected (CNA)

Vendor / product	Versions
LINE Corporation / LINE@ for Android	affected version 1.0.0
LINE Corporation / LINE@ for iOS	affected version 1.0.0

CWE

No CWE identifiers supplied.

References

http://official-blog.line.me/ja/archives/36495925.html
https://jvn.jp/en/jp/JVN22546110/

ADP enrichment

CVE

No English description supplied.

http://official-blog.line.me/ja/archives/36495925.html
https://jvn.jp/en/jp/JVN22546110/

CISA-ADP

No English description supplied.

No references supplied.