CVEvulnerability
CVE-2013-10001
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-05-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-295
Description
A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used.
Affected configurations
• htc mail 5.2.2222282614.528614.528614
• htc mail 5.5.550363
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/ Third Party Advisory
- https://vuldb.com/?id.8900 Permissions Required, Third Party Advisory
- http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/ Third Party Advisory
- https://vuldb.com/?id.8900 Permissions Required, Third Party Advisory