CVE-2023-5554
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-5554 is a vulnerability affecting the financial module within LINE Client for iOS versions prior to 13.16.0. This issue stems from the absence of TLS certificate verification during log transmission. An attacker could exploit this vulnerability by presenting a fraudulent certificate, potentially gaining unauthorized access to sensitive financial information transmitted over the affected application. The lack of certificate verification increases the risk of man-in-the-middle attacks, putting users' financial data at potential risk. The vulnerability was identified and assigned the CVE ID to raise awareness and facilitate mitigation efforts in the cybersecurity community.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Linecorp
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions