CVE-2016-1187

MEDIUM

Cybozu KUNAI for iPhone 2.0.3-3.1.5 & Android 2.1.2-3.0.4 - Sensitive Info Exposure via Unverified SSL Certs

Title source: llm
STIX 2.1

Description

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_confirm
https://support.cybozu.com/ja-jp/article/9446
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN11994518/index.html
Vendor Advisory x_refsource_confirm
https://support.cybozu.com/ja-jp/article/9495
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html

Scores

CVSS v3 6.8
EPSS 0.0038
EPSS Percentile 59.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (22)
cybozu/kunai 2.1.2
cybozu/kunai 2.1.3
cybozu/kunai 3.0.0 (2 CPE variants)
cybozu/kunai 3.0.1 (2 CPE variants)
cybozu/kunai 3.0.2 (2 CPE variants)
cybozu/kunai 3.0.3 (2 CPE variants)
cybozu/kunai 3.0.4 (2 CPE variants)
cybozu/kunai 2.0.3
cybozu/kunai 2.0.3.1
cybozu/kunai 2.0.4
... and 12 more
Published Apr 21, 2017
Tracked Since Feb 18, 2026