CVE-2016-1187

Опубликовано: 21 апр. 2017

Источник: nvd

CVSS3: 6.8

CVSS2: 4.3

EPSS Низкий

Описание

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates.

Ссылки

http://jvn.jp/en/jp/JVN11994518/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html
Third Party Advisory
VDB Entry
https://support.cybozu.com/ja-jp/article/9446
Vendor Advisory
https://support.cybozu.com/ja-jp/article/9495
Vendor Advisory
http://jvn.jp/en/jp/JVN11994518/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html
Third Party Advisory
VDB Entry
https://support.cybozu.com/ja-jp/article/9446
Vendor Advisory
https://support.cybozu.com/ja-jp/article/9495
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cybozu:kunai:2.1.2:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kunai:2.1.3:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kunai:3.0.1:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kunai:3.0.2:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kunai:3.0.3:*:*:*:*:android:*:*

cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:android:*:*

Конфигурация 2

Одно из

cpe:2.3:a:cybozu:kunai:2.0.3:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:2.0.3.1:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:2.0.4:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:2.0.5:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:2.1.0:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:2.1.1:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.0._5:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.0.1:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.0.2:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.0.3:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.0.6:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.0.7:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.1.0:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.1.1:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.1.2:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.1.3:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.1.4:*:*:*:*:iphone_os:*:*

cpe:2.3:a:cybozu:kunai:3.1.5:*:*:*:*:iphone_os:*:*

EPSS

Процентиль: 59%

0.00379

Низкий

6.8 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-gw6q-c3q5-h52c