Refine your search
1 vulnerability found for Outlook.com by Outlook.com
jvndb-2014-000086
Vulnerability from jvndb
Published
2014-07-30 15:11
Modified
2014-08-18 10:09
Summary
Outlook.com for Android contains an issue where it fails to verify SSL server certificates
Details
Outlook.com for Android contains an issue where it fails to verify SSL server certificates.
Koki Takahashi reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000086.html",
"dc:date": "2014-08-18T10:09+09:00",
"dcterms:issued": "2014-07-30T15:11+09:00",
"dcterms:modified": "2014-08-18T10:09+09:00",
"description": "Outlook.com for Android contains an issue where it fails to verify SSL server certificates.\r\n\r\nKoki Takahashi reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000086.html",
"sec:cpe": {
"#text": "cpe:/a:microsoft:outlook.com",
"@product": "Outlook.com",
"@vendor": "Outlook.com",
"@version": "2.2"
},
"sec:cvss": {
"@score": "4.0",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2014-000086",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN72950786/index.html",
"@id": "JVN#72950786",
"@source": "JVN"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5239",
"@id": "CVE-2014-5239",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5239",
"@id": "CVE-2014-5239",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "Outlook.com for Android contains an issue where it fails to verify SSL server certificates"
}