Lucene search

JpcertCVE-2012-4011

HistorySep 08, 2012 - 10:28 a.m.

CVE-2012-4011

2012-09-0810:28:21

CWE-78

jpcert

web.nvd.nist.gov

cybozu kunai

android

cve-2012-4011

remote code execution

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

75.4%

JSON

The Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.

Affected configurations

Nvd

Node

cybozukunaiRange≤2.0.5-android

VendorProductVersionCPE
cybozukunai*cpe:2.3:a:cybozu:kunai:*:-:*:*:*:android:*:*

Vendor	Product	Version	CPE
cybozu	kunai	*	cpe:2.3:a:cybozu:kunai::-::::android::

References

cs.cybozu.co.jp/information/20120910up01.php

jvn.jp/en/jp/JVN23568423/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000083

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

75.4%

JSON

Related for CVE-2012-4011