JVN#78745667: Multiples security updates for multiple Cybozu products

Cybozu, Inc. has released multiple security updates for multiple Cybozu products. CyVDB-2465 Credential Disclosure Vulnerability - CVE-2020-5572 CyVDB-2484 Credential Disclosure Vulnerability - CVE-2020-5573 Impact A user who can login to the product may obtain sensitive information registered in...

CVE-2020-5573: Exposure of Sensitive Information to an Unauthorized Actor

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

PT-2020-18548

Name of the Vulnerable Software and Affected Versions kintone mobile for Android versions 1.0.0 through 2.5 Description The issue allows an attacker to obtain credential information registered in the product via unspecified vectors. Recommendations For versions 1.0.0 through 2.5, update to a...

CVE-2016-7816: Improper Certificate Validation

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-9367

Name of the Vulnerable Software and Affected Versions Cybozu kintone mobile for Android versions 1.0.6 and earlier Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as it does not verify X.509 certificates from SS...

CVE-2016-1186: Improper Certificate Validation

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates...

PT-2017-7933

Name of the Vulnerable Software and Affected Versions Kintone mobile for Android versions 1.0.0 through 1.0.5 Description The issue is related to the failure of verifying SSL server certificates. This could potentially allow for man-in-the-middle attacks. Recommendations For versions 1.0.0 throug...