Skip to content
OpenAdvisories
Unscored CVE-2018-0518 EUVD-2018-1337GHSA-h956-h9q8-3c53

LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof …

Published Feb 23, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: LINE Product: LINE for iOS Platform: iOS

Description

LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

VendorProductAffectedFixed
LINE LINE for iOS version 7.1.3 to 7.1.5 —

References