Search criteria

1 vulnerability found for KDrive Personal for Windows by KINGSOFT, INC.

JVNDB-2013-000108

Vulnerability from jvndb - Published: 2013-11-22 17:39 - Updated:2013-11-26 16:02
Severity ?
() - -
Summary
KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates
Details
KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates. Yamano Yasuaki of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Show details on JVN DB website

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000108.html",
  "dc:date": "2013-11-26T16:02+09:00",
  "dcterms:issued": "2013-11-22T17:39+09:00",
  "dcterms:modified": "2013-11-26T16:02+09:00",
  "description": "KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates.\r\n\r\nYamano Yasuaki of NetAgent Co.,Ltd. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000108.html",
  "sec:cpe": {
    "#text": "cpe:/a:kingsoft:kdrive",
    "@product": "KDrive Personal for Windows",
    "@vendor": "KINGSOFT, INC.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-000108",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN97810280/index.html",
      "@id": "JVN#97810280",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5999",
      "@id": "CVE-2013-5999",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-5999",
      "@id": "CVE-2013-5999",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates"
}