CVE-2016-1187: Infoleak
Published Apr 21, 2017
·Updated
Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates.
Affected Software
27 affected components
Cybozu Kunai Android=2.1.2
Cybozu Kunai Android=2.1.3
Cybozu Kunai Android=3.0.0
Cybozu Kunai Android=3.0.1
Cybozu Kunai Android=3.0.2
Cybozu Kunai Android=3.0.3
Cybozu Kunai Android=3.0.4
Cybozu Kunai Iphone Os=2.0.3
Cybozu Kunai Iphone Os=2.0.3.1
Cybozu Kunai Iphone Os=2.0.4
Cybozu Kunai Iphone Os=2.0.5
Cybozu Kunai Iphone Os=2.1.0
Cybozu Kunai Iphone Os=2.1.1
Cybozu Kunai Iphone Os=3.0._5
Cybozu Kunai Iphone Os=3.0.0
Cybozu Kunai Iphone Os=3.0.1
Cybozu Kunai Iphone Os=3.0.2
Cybozu Kunai Iphone Os=3.0.3
Cybozu Kunai Iphone Os=3.0.4
Cybozu Kunai Iphone Os=3.0.6
Cybozu Kunai Iphone Os=3.0.7
Cybozu Kunai Iphone Os=3.1.0
Cybozu Kunai Iphone Os=3.1.1
Cybozu Kunai Iphone Os=3.1.2
Cybozu Kunai Iphone Os=3.1.3
Cybozu Kunai Iphone Os=3.1.4
Cybozu Kunai Iphone Os=3.1.5
Event History
Apr 21, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What are the implications of CVE-2016-1187?
CVE-2016-1187 allows attackers to intercept and manipulate data due to the lack of SSL certificate verification.
2
How can I mitigate CVE-2016-1187?
To mitigate CVE-2016-1187, ensure you update to the latest version of Cybozu Kunai that includes SSL certificate verification.
3
What versions of Cybozu Kunai are affected by CVE-2016-1187?
CVE-2016-1187 affects Cybozu Kunai for iPhone versions 2.0.3 to 3.1.5 and Android versions 2.1.2 to 3.0.4.
4
Is CVE-2016-1187 a serious vulnerability?
Yes, CVE-2016-1187 is considered serious as it compromises the security of communications in the affected applications.
5
What should I do if I cannot update due to compatibility issues related to CVE-2016-1187?
If you cannot update due to compatibility issues, consider using alternate secure applications or implementing additional security measures to protect your data.