VULNERABILITY INTELLIGENCE

CVE-2018-13435

CVSS score7 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2018-08-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method to disable passcode authentication. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes iOS devices on which a jailbreak has occurred

Weakness classification

  • CWE-287: Improper Authentication

Primary references