Vulnerabilities > CVE-2015-2968 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Line Line@ 1.0.0
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 2 |