CVE-2018-13435: High severity line vulnerability

Published Aug 16, 2018

Updated

DISPUTED An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method to disable passcode authentication. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes iOS devices on which a jailbreak has occurred.

Affected Software

1 affected component

linecorp Line Iphone Os=8.8.0

Event History

Aug 16, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Disputed

08:29 PM

Frequently Asked Questions

What is the vulnerability in jp.naver.line application 8.8.0 for iOS?

The vulnerability in jp.naver.line application 8.8.0 for iOS allows authentication bypass via runtime manipulation that forces disabling passcode authentication.

Is the severity of CVE-2018-13435 high?

Yes, the severity of CVE-2018-13435 is high with a severity value of 7.

How does the passcode feature in jp.naver.line application 8.8.0 for iOS get bypassed?

The passcode feature in jp.naver.line application 8.8.0 for iOS gets bypassed through runtime manipulation that forces a certain method to disable passcode authentication.

Which version of the jp.naver.line application for iOS is affected by CVE-2018-13435?

The version 8.8.0 of the jp.naver.line application for iOS is affected by CVE-2018-13435.

How can I fix CVE-2018-13435 in jp.naver.line application 8.8.0 for iOS?

There is no known fix or patch available for CVE-2018-13435. Please contact the vendor for more information.