Description
The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cybozu | kintone mobile for Android | 1.0.6 and earlier | — |
References
- JVN#20252219 third-party-advisory
- 94547 vdb-entry
- https://support.cybozu.com/ja-jp/article/9719