CVE-2016-1187

中危 6.8CVE-2016-1187 · Published 21/04/2017 · updated 17/06/2026

要点

CVE-2016-1187 是影响 kunai (cybozu) 的中危 (CVSS 6.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.2%，高于 68.0% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
kunai cybozu	`= 2.0.3= 2.0.3.1= 2.0.4= 2.0.5= 2.1.0= 2.1.1= 2.1.2= 2.1.3= 3.0.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.6= 3.0.7= 3.0._5= 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5`	No fix yet

Description

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates.

References

jvn.jp/en/jp/JVN11994518/index.html · Third Party Advisory
jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html · Third Party Advisory
support.cybozu.com/ja-jp/article/9446 · Vendor Advisory
support.cybozu.com/ja-jp/article/9495 · Vendor Advisory

kunai 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

kunai

cybozu

= 2.0.3= 2.0.3.1= 2.0.4= 2.0.5= 2.1.0= 2.1.1= 2.1.2= 2.1.3= 3.0.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.0.6= 3.0.7= 3.0._5= 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5

No fix yet

kunai 的其他漏洞

查看全部 →