CVE-2015-2968 Other in LINE@ for Android
Attackers can intercept traffic and inject scripts to execute code or read data due to lack of SSL/TLS enforcement in the mobile app.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-2968?
CVE-2015-2968 is a medium-severity vulnerability in LINE@ for Android, published on 31 Oct 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.
Weakness: CWE-924
Which versions are affected by CVE-2015-2968?
It affects 1 product.
Products include Line Line\@.
How do I fix CVE-2015-2968?
No fix has been published for CVE-2015-2968 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-2968 being exploited?
There is no known exploitation of CVE-2015-2968 in the wild and no public exploit code.
Sources
Also known as GHSA-4qwg-3cm6-6646.