CVE Vulnerabilities

CVE-2016-1186

Improper Certificate Validation

Published: Apr 21, 2017 | Modified: Nov 21, 2024
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Kintone Cybozu 1.0.0 (including) 1.0.0 (including)
Kintone Cybozu 1.0.1 (including) 1.0.1 (including)
Kintone Cybozu 1.0.2 (including) 1.0.2 (including)
Kintone Cybozu 1.0.3 (including) 1.0.3 (including)
Kintone Cybozu 1.0.4 (including) 1.0.4 (including)
Kintone Cybozu 1.0.5 (including) 1.0.5 (including)

Potential Mitigations

References