CVE-2021-41011 Information disclosure in LINE client for iOS

What is CVE-2021-41011?

CVE-2021-41011 is a high-severity vulnerability in Linecorp Line, published on 22 Sep 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditions. This is usually impossible, but in combination with a server-side bug, attackers could get this information.

Which versions are affected by CVE-2021-41011?

It affects 1 product.

Products include Linecorp Line.

How do I fix CVE-2021-41011?

No fix has been published for CVE-2021-41011 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-41011 being exploited?

There is no known exploitation of CVE-2021-41011 in the wild and no public exploit code.

Other vulnerabilities in Linecorp Line

• CVE-2023-45559 Information disclosure in n/a High 8.2
• CVE-2023-43305 Information disclosure in n/a High 8.2
• CVE-2023-43300 Information disclosure in n/a High 8.2
• CVE-2023-43301 Code injection in n/a High 8.2
• CVE-2023-43302 Information disclosure in n/a High 8.2

All Linecorp Line vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5gxv-94vg-h86p.