Описание
LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditions. This is usually impossible, but in combination with a server-side bug, attackers could get this information.
Ссылки
- Permissions RequiredThird Party Advisory
- Permissions RequiredThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 11.15.0 (исключая)
cpe:2.3:a:linecorp:line:*:*:*:*:*:iphone_os:*:*
EPSS
Процентиль: 60%
0.0039
Низкий
7.5 High
CVSS3
4.3 Medium
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditions. This is usually impossible, but in combination with a server-side bug, attackers could get this information.
EPSS
Процентиль: 60%
0.0039
Низкий
7.5 High
CVSS3
4.3 Medium
CVSS2
Дефекты
NVD-CWE-noinfo