EUVD-2016-8665

Malware in sbrugna...

EUVD-2016-2288

Malware in sbrugna...

EUVD-2020-26735

Malware in sbrugna...

Cybozu Kintone Mobile Information Disclosure Vulnerability

Cybozu Kintone Mobile is an office application for mobile platforms from Cybozu Japan. The program supports file uploading, editing records, and push notifications. An information disclosure vulnerability exists in Cybozu Kintone Mobile versions 1.0.0 through 2.5 for the Android-based platform. T...

CVE-2020-5573

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2020-5573

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

Design/Logic Flaw

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2020-5573

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2020-5573: Exposure of Sensitive Information to an Unauthorized Actor

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

JVN#78745667: Multiples security updates for multiple Cybozu products

Cybozu, Inc. has released multiple security updates for multiple Cybozu products. CyVDB-2465 Credential Disclosure Vulnerability - CVE-2020-5572 CyVDB-2484 Credential Disclosure Vulnerability - CVE-2020-5573 Impact A user who can login to the product may obtain sensitive information registered in...

PT-2020-18548

Name of the Vulnerable Software and Affected Versions kintone mobile for Android versions 1.0.0 through 2.5 Description The issue allows an attacker to obtain credential information registered in the product via unspecified vectors. Recommendations For versions 1.0.0 through 2.5, update to a...

CVE-2016-7816: Improper Certificate Validation

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-9367

Name of the Vulnerable Software and Affected Versions Cybozu kintone mobile for Android versions 1.0.6 and earlier Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as it does not verify X.509 certificates from SS...

CVE-2016-1186

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates...

PT-2017-7933

Name of the Vulnerable Software and Affected Versions Kintone mobile for Android versions 1.0.0 through 1.0.5 Description The issue is related to the failure of verifying SSL server certificates. This could potentially allow for man-in-the-middle attacks. Recommendations For versions 1.0.0 throug...

CVE-2016-1186: Improper Certificate Validation

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates...

kintone mobile for Android fails to verify SSL server certificates

Overview kintone mobile for Android provided by Cybozu, Inc. fails to verify SSL server certificates in WebView. Note that this vulnerability is different from JVN91816422. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc...

JVN#20252219: kintone mobile for Android fails to verify SSL server certificates

kintone mobile for Android provided by Cybozu, Inc. fails to verify SSL server certificates in WebView. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provid...

PT-2016-4627

Name of the Vulnerable Software and Affected Versions Cybozu kintone mobile application version 1.x before 1.0.6 for Android Description The issue allows attackers to discover an authentication token via a crafted application. This could potentially lead to unauthorized access. Recommendations Fo...

CVE-2016-1185: Exposure of Sensitive Information to an Unauthorized Actor

The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application...