Authentication flaw

2016-04-2518:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.3%

The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application.

CPENameOperatorVersion
kintoneeq1.0.0
kintoneeq1.0.1
kintoneeq1.0.5
kintoneeq1.0.2
kintoneeq1.0.3
kintoneeq1.0.4

Name	Operator	Version
kintone	eq	1.0.0
kintone	eq	1.0.1
kintone	eq	1.0.5
kintone	eq	1.0.2
kintone	eq	1.0.3
kintone	eq	1.0.4

References

jvn.jp/en/jp/JVN89026267/index.html

jvndb.jvn.jp/jvndb/JVNDB-2016-000055

www.securityfocus.com/bid/96842

support.cybozu.com/ja-jp/article/9479