JVN#82029095: sp mode mail issue in the verification of SSL certificates

sp mode mail provided by NTT DOCOMO contains an issue in the verification of the SSL server certificate.

Impact

Since no warning is issued when connecting to a server that is using an invalid SSL server certificate, a remote attacker may be able to intercept communications.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• sp mode mail version 5400 and earlier

According to the developer, only sp mode mail applications for Android are affected.