CVE-2013-5999 - Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate

Back Back to CVE browser

MEDIUM

Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate

Published Nov 22, 2013

5.8

MEDIUM

CVSS 2.0

EPSS 0.58%

Description

Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-310

References (3)

http://faq.kdrive.jp/2013/11/19/pcappupdate.html
x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN97810280/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108
third-party-advisoryx_refsource_JVNDB

Link	Providers	Tags
http://faq.kdrive.jp/2013/11/19/pcappupdate.html		x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN97810280/index.html		third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108		third-party-advisoryx_refsource_JVNDB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Nov 22, 2013

Updated Aug 6, 2024

Reserved Oct 3, 2013

Link CVE-2013-5999

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-5999

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-5999