JVN#18743512: Cybozu KUNAI for Android vulnerable to denial-of-service (DoS)

Cybozu KUNAI for Android is a client application for using Cybozu products from an Android device. Cybozu KUNAI for Android contains an issue allowing to send massive requests to the connected Cybozu product if a user performs certain operations on KUNAI, which may result in repeated session disconnections in a short period of time and preventing normal use of KUNAI (CWE-436).

Impact

A user of KUNAI could cause a denial of service (DoS) condition by performing certain operations.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

Products Affected

• Cybozu KUNAI for Android 3.0.20 to 3.0.21