LINE iOS Client Man-in-the-Middle Vulnerability Due to Improper SSL/TLS Certificate Validation

A man-in-the-middle vulnerability has been identified in the LINE client for iOS, affecting versions prior to 15.4. This issue arises from improper SSL/TLS certificate validation within an integrated financial SDK, which disrupts the application's network processing. As a result, server certificate verification is disabled for a large portion of network traffic. This flaw could enable a network-adjacent attacker to intercept or modify encrypted communications.

Impact

Exploitation of this vulnerability could lead to interception or modification of encrypted communications between the LINE client and servers, allowing attackers to conduct man-in-the-middle attacks.