Skip to content
OpenAdvisories
Unscored CVE-2018-13446 EUVD-2018-5388GHSA-p2q3-gpj5-6r93

An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runt…

Published Aug 16, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred

References