CVE Vulnerabilities

CVE-2016-1186

Improper Certificate Validation

Published: Apr 21, 2017 | Modified: Apr 26, 2017
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Kintone Cybozu 1.0.0 (including) 1.0.0 (including)
Kintone Cybozu 1.0.1 (including) 1.0.1 (including)
Kintone Cybozu 1.0.2 (including) 1.0.2 (including)
Kintone Cybozu 1.0.3 (including) 1.0.3 (including)
Kintone Cybozu 1.0.4 (including) 1.0.4 (including)
Kintone Cybozu 1.0.5 (including) 1.0.5 (including)

Potential Mitigations

References