exploitDog

CVE-2016-1186

Опубликовано: 21 апр. 2017

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.

Ссылки

http://jvn.jp/en/jp/JVN91816422/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000056.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/97976
Third Party Advisory
VDB Entry
https://support.cybozu.com/ja-jp/article/9480
Vendor Advisory
http://jvn.jp/en/jp/JVN91816422/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000056.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/97976
Third Party Advisory
VDB Entry
https://support.cybozu.com/ja-jp/article/9480
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cybozu:kintone:1.0.0:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kintone:1.0.1:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kintone:1.0.2:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kintone:1.0.3:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kintone:1.0.4:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kintone:1.0.5:*:*:*:*:android:*:*

EPSS

Процентиль: 68%

0.00565

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-q4rw-r22f-cj98

CVSS3: 5.9

github

больше 3 лет назад

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.

EPSS

Процентиль: 68%

0.00565

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295