CVE Feed

    Dashboard / CVE / CVE-2018-13446

    CVE-2018-13446

    An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred

    Published:Aug 16, 2018
    Last Modified:Nov 21, 2024
    EPS:Aug 16, 2018
    EPSS Score:0.00061
    CVSS Score:7

    Affected Products

    Vendor
    Linecorp
    Product
    Line

    Common Weakness Enumeration

    Related CVEs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High