The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-04-27 11:55
Updated : 2017-12-13 18:29
NVD link : CVE-2012-1244
Mitre link : CVE-2012-1244
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
nttdocomo
- spmode_mail_android