Search

Find a vulnerability

Search criteria

    1 vulnerability found for Yafuoku! by Yahoo Japan Corporation

    JVNDB-2013-000078

    Vulnerability from jvndb - Published: 2013-08-19 15:35 - Updated:2013-08-23 18:43
    Severity
    N/A (UNKNOWN) - -
    Summary
    Yafuoku! contains an issue where it fails to verify SSL server certificates
    Details
    Yafuoku! provided by Yahoo Japan Corporation contains an issue where it fails to verify SSL server certificates. Zachary Mathis of Proactive Defense (Kobe Digital Labo) reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Impacted products
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000078.html",
      "dc:date": "2013-08-23T18:43+09:00",
      "dcterms:issued": "2013-08-19T15:35+09:00",
      "dcterms:modified": "2013-08-23T18:43+09:00",
      "description": "Yafuoku! provided by Yahoo Japan Corporation contains an issue where it fails to verify SSL server certificates.\r\n\r\nZachary Mathis of Proactive Defense (Kobe Digital Labo) reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000078.html",
      "sec:cpe": {
        "#text": "cpe:/a:misc:yafuoku%21",
        "@product": "Yafuoku!",
        "@vendor": "Yahoo Japan Corporation",
        "@version": "2.2"
      },
      "sec:cvss": {
        "@score": "2.6",
        "@severity": "Low",
        "@type": "Base",
        "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
        "@version": "2.0"
      },
      "sec:identifier": "JVNDB-2013-000078",
      "sec:references": [
        {
          "#text": "http://jvn.jp/en/jp/JVN68156832/index.html",
          "@id": "JVN#68156832",
          "@source": "JVN"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4699",
          "@id": "CVE-2013-4699",
          "@source": "CVE"
        },
        {
          "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4699",
          "@id": "CVE-2013-4699",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-Other",
          "@title": "No Mapping(CWE-Other)"
        }
      ],
      "title": "Yafuoku! contains an issue where it fails to verify SSL server certificates"
    }