CVE-2016-1187 - Vulnerability Details

Vendors	Products
Cybozu	Kunai

Link	Providers
http://jvn.jp/en/jp/JVN11994518/index.html
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html
https://support.cybozu.com/ja-jp/article/9446
https://support.cybozu.com/ja-jp/article/9495

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-05-16T00:00:00", "descriptions": [{"lang": "en", "value": "Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-04-21T19:57:01", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://support.cybozu.com/ja-jp/article/9446"}, {"name": "JVN#11994518", "tags": ["third-party-advisory", "x_refsource_JVN"], "url": "http://jvn.jp/en/jp/JVN11994518/index.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.cybozu.com/ja-jp/article/9495"}, {"name": "JVNDB-2016-000060", "tags": ["third-party-advisory", "x_refsource_JVNDB"], "url": "http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "vultures@jpcert.or.jp", "ID": "CVE-2016-1187", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://support.cybozu.com/ja-jp/article/9446", "refsource": "CONFIRM", "url": "https://support.cybozu.com/ja-jp/article/9446"}, {"name": "JVN#11994518", "refsource": "JVN", "url": "http://jvn.jp/en/jp/JVN11994518/index.html"}, {"name": "https://support.cybozu.com/ja-jp/article/9495", "refsource": "CONFIRM", "url": "https://support.cybozu.com/ja-jp/article/9495"}, {"name": "JVNDB-2016-000060", "refsource": "JVNDB", "url": "http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:48:13.497Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.cybozu.com/ja-jp/article/9446"}, {"name": "JVN#11994518", "tags": ["third-party-advisory", "x_refsource_JVN", "x_transferred"], "url": "http://jvn.jp/en/jp/JVN11994518/index.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.cybozu.com/ja-jp/article/9495"}, {"name": "JVNDB-2016-000060", "tags": ["third-party-advisory", "x_refsource_JVNDB", "x_transferred"], "url": "http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html"}]}]}, "cveMetadata": {"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2016-1187", "datePublished": "2017-04-21T20:00:00", "dateReserved": "2015-12-26T00:00:00", "dateUpdated": "2024-08-05T22:48:13.497Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-05-16T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-04-21T19:57:01 (string)

orgId : ede6fdc4-6654-4307-a26d-3331c018e2ce (string)

shortName : jpcert (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://support.cybozu.com/ja-jp/article/9446 (string)

}

1 : { »

name : JVN#11994518 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_JVN (string)

]

url : http://jvn.jp/en/jp/JVN11994518/index.html (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://support.cybozu.com/ja-jp/article/9495 (string)

}

3 : { »

name : JVNDB-2016-000060 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_JVNDB (string)

]

url : http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : vultures@jpcert.or.jp (string)

ID : CVE-2016-1187 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://support.cybozu.com/ja-jp/article/9446 (string)

refsource : CONFIRM (string)

url : https://support.cybozu.com/ja-jp/article/9446 (string)

}

1 : { »

name : JVN#11994518 (string)

refsource : JVN (string)

url : http://jvn.jp/en/jp/JVN11994518/index.html (string)

}

2 : { »

name : https://support.cybozu.com/ja-jp/article/9495 (string)

refsource : CONFIRM (string)

url : https://support.cybozu.com/ja-jp/article/9495 (string)

}

3 : { »

name : JVNDB-2016-000060 (string)

refsource : JVNDB (string)

url : http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T22:48:13.497Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://support.cybozu.com/ja-jp/article/9446 (string)

}

1 : { »

name : JVN#11994518 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_JVN (string)

2 : x_transferred (string)

]

url : http://jvn.jp/en/jp/JVN11994518/index.html (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://support.cybozu.com/ja-jp/article/9495 (string)

}

3 : { »

name : JVNDB-2016-000060 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_JVNDB (string)

2 : x_transferred (string)

]

url : http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : ede6fdc4-6654-4307-a26d-3331c018e2ce (string)

assignerShortName : jpcert (string)

cveId : CVE-2016-1187 (string)

datePublished : 2017-04-21T20:00:00 (string)

dateReserved : 2015-12-26T00:00:00 (string)

dateUpdated : 2024-08-05T22:48:13.497Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cybozu:kunai:2.1.2:*:*:*:*:android:*:*", "matchCriteriaId": "1128DC6B-0A43-4003-9B81-01573DE4BEA8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:2.1.3:*:*:*:*:android:*:*", "matchCriteriaId": "09E31D3E-1302-46C9-A1DE-6EABBD0F9AF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:android:*:*", "matchCriteriaId": "3AF2CE5A-5E23-4BC7-845B-A5AB1AA851D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.1:*:*:*:*:android:*:*", "matchCriteriaId": "95703DE0-59AE-4DD7-9F4D-01AAB7394CB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.2:*:*:*:*:android:*:*", "matchCriteriaId": "259B2682-0893-4100-8E44-096AAA42178E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.3:*:*:*:*:android:*:*", "matchCriteriaId": "0279559D-E349-4A29-85E2-CEB8DB291E1E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:android:*:*", "matchCriteriaId": "A568C416-2533-4EC6-B1F6-CB099EAC0AB1", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cybozu:kunai:2.0.3:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "FF5CB8EB-70DB-4828-9F07-44B14F9B53DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:2.0.3.1:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "C1CAF096-D82C-408B-88AF-FC94F7BB88D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:2.0.4:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "8F34C358-DCD0-41EA-9E1A-24284DBDB442", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:2.0.5:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "C018B002-2FC0-4B17-9192-1389E3A84CCB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:2.1.0:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "6B43980D-5CAD-4276-832B-0C25CA8740A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:2.1.1:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "C650B18A-314D-402E-B4CD-7E14C03F1D8E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0._5:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "702C4C54-DDB5-4DE6-8507-AE45FB315AFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "F1013CA3-BFBF-45F6-A718-D13DE63B8896", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.1:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "A6F4B2AF-A22E-490D-8E6B-BFD6E6692699", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.2:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "F7234A4A-F071-4E18-9DD2-52E85970F09D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.3:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "61B4BFCD-ADB2-4135-8BD5-FA720B90BC19", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "52CFAF0A-704C-4922-877A-E6BA4ED9E7BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.6:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "AB5E929F-04C2-4AF7-ABF4-170AF876856B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.0.7:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "4A96CEF9-DCD5-4E0F-AC89-ED68CC0358AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.1.0:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "74D7C89A-EF21-489C-A4F6-5F2954F41EF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.1.1:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "DF36F61F-0D48-4D5B-B990-FB3BBED4DA19", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.1.2:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "FD596194-5EC6-4BAE-AD51-8E53B5F29E41", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.1.3:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "4248BA36-DF2C-46ED-BD4B-D68CCC82E78D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.1.4:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "62239DD9-89D8-4475-A61B-F43B2AC37140", "vulnerable": true}, {"criteria": "cpe:2.3:a:cybozu:kunai:3.1.5:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "1E512C32-0EB9-4606-9DA9-D6CFDFCDBD25", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates."}, {"lang": "es", "value": "Cybozu KUNAI para iPhone 2.0.3 hasta la versi\u00f3n 3.1.5 y para Android 2.1.2 hasta la versi\u00f3n 3.0.4 no verifica certificados SSL."}], "id": "CVE-2016-1187", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 4.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-04-21T20:59:00.197", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://jvn.jp/en/jp/JVN11994518/index.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://support.cybozu.com/ja-jp/article/9446"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://support.cybozu.com/ja-jp/article/9495"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://jvn.jp/en/jp/JVN11994518/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.cybozu.com/ja-jp/article/9446"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.cybozu.com/ja-jp/article/9495"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cybozu:kunai:2.1.2:*:*:*:*:android:*:* (string)

matchCriteriaId : 1128DC6B-0A43-4003-9B81-01573DE4BEA8 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cybozu:kunai:2.1.3:*:*:*:*:android:*:* (string)

matchCriteriaId : 09E31D3E-1302-46C9-A1DE-6EABBD0F9AF8 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:android:*:* (string)

matchCriteriaId : 3AF2CE5A-5E23-4BC7-845B-A5AB1AA851D8 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.1:*:*:*:*:android:*:* (string)

matchCriteriaId : 95703DE0-59AE-4DD7-9F4D-01AAB7394CB2 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.2:*:*:*:*:android:*:* (string)

matchCriteriaId : 259B2682-0893-4100-8E44-096AAA42178E (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.3:*:*:*:*:android:*:* (string)

matchCriteriaId : 0279559D-E349-4A29-85E2-CEB8DB291E1E (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:android:*:* (string)

matchCriteriaId : A568C416-2533-4EC6-B1F6-CB099EAC0AB1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cybozu:kunai:2.0.3:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : FF5CB8EB-70DB-4828-9F07-44B14F9B53DD (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cybozu:kunai:2.0.3.1:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : C1CAF096-D82C-408B-88AF-FC94F7BB88D4 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cybozu:kunai:2.0.4:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 8F34C358-DCD0-41EA-9E1A-24284DBDB442 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cybozu:kunai:2.0.5:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : C018B002-2FC0-4B17-9192-1389E3A84CCB (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:cybozu:kunai:2.1.0:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 6B43980D-5CAD-4276-832B-0C25CA8740A9 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:cybozu:kunai:2.1.1:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : C650B18A-314D-402E-B4CD-7E14C03F1D8E (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0._5:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 702C4C54-DDB5-4DE6-8507-AE45FB315AFC (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : F1013CA3-BFBF-45F6-A718-D13DE63B8896 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.1:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : A6F4B2AF-A22E-490D-8E6B-BFD6E6692699 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.2:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : F7234A4A-F071-4E18-9DD2-52E85970F09D (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.3:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 61B4BFCD-ADB2-4135-8BD5-FA720B90BC19 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 52CFAF0A-704C-4922-877A-E6BA4ED9E7BF (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.6:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : AB5E929F-04C2-4AF7-ABF4-170AF876856B (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.0.7:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 4A96CEF9-DCD5-4E0F-AC89-ED68CC0358AE (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.1.0:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 74D7C89A-EF21-489C-A4F6-5F2954F41EF4 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.1.1:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : DF36F61F-0D48-4D5B-B990-FB3BBED4DA19 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.1.2:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : FD596194-5EC6-4BAE-AD51-8E53B5F29E41 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.1.3:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 4248BA36-DF2C-46ED-BD4B-D68CCC82E78D (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.1.4:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 62239DD9-89D8-4475-A61B-F43B2AC37140 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:cybozu:kunai:3.1.5:*:*:*:*:iphone_os:*:* (string)

matchCriteriaId : 1E512C32-0EB9-4606-9DA9-D6CFDFCDBD25 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. (string)

}

1 : { »

lang : es (string)

value : Cybozu KUNAI para iPhone 2.0.3 hasta la versión 3.1.5 y para Android 2.1.2 hasta la versión 3.0.4 no verifica certificados SSL. (string)

}

]

id : CVE-2016-1187 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:M/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-04-21T20:59:00.197 (string)

references : [ »

0 : { »

source : vultures@jpcert.or.jp (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://jvn.jp/en/jp/JVN11994518/index.html (string)

}

1 : { »

source : vultures@jpcert.or.jp (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html (string)

}

2 : { »

source : vultures@jpcert.or.jp (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.cybozu.com/ja-jp/article/9446 (string)

}

3 : { »

source : vultures@jpcert.or.jp (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.cybozu.com/ja-jp/article/9495 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://jvn.jp/en/jp/JVN11994518/index.html (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html (string)

}

6 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.cybozu.com/ja-jp/article/9446 (string)

}

7 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.cybozu.com/ja-jp/article/9495 (string)

}

]

sourceIdentifier : vultures@jpcert.or.jp (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-200 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object