Vulnerability-Lookup

CVE-2013-5999 (GCVE-0-2013-5999)

Vulnerability from cvelistv5 – Published: 2013-11-22 17:00 – Updated: 2024-08-06 17:29

Summary

Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Severity

No CVSS data available.

CWE

Assigner

jpcert jpcert root Scorecard

References

3 references

URL	Tags
http://faq.kdrive.jp/2013/11/19/pcappupdate.html	x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN97810280/index.html	third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108	third-party-advisoryx_refsource_JVNDB

Date Public

2013-11-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:29:42.601Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
          },
          {
            "name": "JVN#97810280",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
          },
          {
            "name": "JVNDB-2013-000108",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-11-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-11-23T18:10:04.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
        },
        {
          "name": "JVN#97810280",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
        },
        {
          "name": "JVNDB-2013-000108",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-5999",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html",
              "refsource": "CONFIRM",
              "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
            },
            {
              "name": "JVN#97810280",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
            },
            {
              "name": "JVNDB-2013-000108",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-5999",
    "datePublished": "2013-11-22T17:00:00.000Z",
    "dateReserved": "2013-10-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:29:42.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2013-5999",
      "date": "2026-10-03",
      "epss": "0.00582",
      "percentile": "0.45879"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "vultures@jpcert.or.jp"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:kingsoft:kdrive:*:-:-:*:personal:windows:*:*",
                    "matchCriteriaId": "5039F082-CC7C-4345-BDE1-75F7EBBBA944",
                    "versionEndIncluding": "1.21.0.1878",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
          },
          {
            "lang": "es",
            "value": "Kingsoft Kdrive Personal anterior a 1.21.0.1880 en Windows no verifica los certificados X.509 de servidores SSL, lo que permite a atacantes man-in-the-middle falsificar servidores y obtener informaci\u00f3n sensible a trav\u00e9s de un certificado modificado."
          }
        ],
        "id": "CVE-2013-5999",
        "lastModified": "2026-06-16T23:59:52.040",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 5.8,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 4.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2013-11-22T19:55:09.500",
        "references": [
          {
            "source": "vultures@jpcert.or.jp",
            "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
          }
        ],
        "sourceIdentifier": "vultures@jpcert.or.jp",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-310"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

EUVD-2026-108374

European Vulnerability Database identifier assigned by ENISA

Reserved

2026-10-02 06:29

Assigner

ENISA

Alias of

a CVE record, shown under related vulnerabilities. This identifier carries no description, severity or references of its own: they belong to that CVE.

JSON

To clipboard

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T06:29:33.951657+00:00",
  "id": "EUVD-2026-108374"
}

FKIE_CVE-2013-5999

Vulnerability from fkie_nvd - Published: 2013-11-22 19:55 - Updated: 2026-06-16 23:59

Severity

Summary

References

	URL	Tags
	vultures@jpcert.or.jp	http://faq.kdrive.jp/2013/11/19/pcappupdate.html
	vultures@jpcert.or.jp	http://jvn.jp/en/jp/JVN97810280/index.html
	vultures@jpcert.or.jp	http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108
	af854a3a-2127-422b-91ae-364da2661108	http://faq.kdrive.jp/2013/11/19/pcappupdate.html
	af854a3a-2127-422b-91ae-364da2661108	http://jvn.jp/en/jp/JVN97810280/index.html
	af854a3a-2127-422b-91ae-364da2661108	http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108

Impacted products

	Vendor	Product	Version
	kingsoft	kdrive	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kingsoft:kdrive:*:-:-:*:personal:windows:*:*",
              "matchCriteriaId": "5039F082-CC7C-4345-BDE1-75F7EBBBA944",
              "versionEndIncluding": "1.21.0.1878",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
    },
    {
      "lang": "es",
      "value": "Kingsoft Kdrive Personal anterior a 1.21.0.1880 en Windows no verifica los certificados X.509 de servidores SSL, lo que permite a atacantes man-in-the-middle falsificar servidores y obtener informaci\u00f3n sensible a trav\u00e9s de un certificado modificado."
    }
  ],
  "id": "CVE-2013-5999",
  "lastModified": "2026-06-16T23:59:52.040",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-11-22T19:55:09.500",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-RRWP-7W9C-GF2G

Vulnerability from github – Published: 2022-05-17 04:51 – Updated: 2022-05-17 04:51

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2013-5999"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2013-11-22T19:55:00Z",
    "severity": "MODERATE"
  },
  "details": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.",
  "id": "GHSA-rrwp-7w9c-gf2g",
  "modified": "2022-05-17T04:51:13Z",
  "published": "2022-05-17T04:51:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5999"
    },
    {
      "type": "WEB",
      "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
    },
    {
      "type": "WEB",
      "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
    },
    {
      "type": "WEB",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2013-5999

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2013-5999

Aliases

CVE-2013-5999

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2013-5999",
    "description": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.",
    "id": "GSD-2013-5999"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2013-5999"
      ],
      "details": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.",
      "id": "GSD-2013-5999",
      "modified": "2023-12-13T01:22:21.411164Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "vultures@jpcert.or.jp",
        "ID": "CVE-2013-5999",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html",
            "refsource": "CONFIRM",
            "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
          },
          {
            "name": "JVN#97810280",
            "refsource": "JVN",
            "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
          },
          {
            "name": "JVNDB-2013-000108",
            "refsource": "JVNDB",
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:kingsoft:kdrive:*:-:-:*:personal:windows:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.21.0.1878",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-5999"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-310"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVNDB-2013-000108",
              "refsource": "JVNDB",
              "tags": [],
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108"
            },
            {
              "name": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://faq.kdrive.jp/2013/11/19/pcappupdate.html"
            },
            {
              "name": "JVN#97810280",
              "refsource": "JVN",
              "tags": [],
              "url": "http://jvn.jp/en/jp/JVN97810280/index.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 4.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2014-03-05T18:58Z",
      "publishedDate": "2013-11-22T19:55Z"
    }
  }
}

JVNDB-2013-000108

Vulnerability from jvndb - Published: 2013-11-22 08:39 - Updated:2013-11-26 07:02

Severity

N/A (UNKNOWN) - -

Summary

KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates

Details

KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates. Yamano Yasuaki of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

References

Type

URL

	JVN	http://jvn.jp/en/jp/JVN97810280/index.html
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5999
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-5999
	No Mapping(CWE-Other)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

KINGSOFT, INC.

KDrive Personal for Windows

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000108.html",
  "dc:date": "2013-11-26T16:02+09:00",
  "dcterms:issued": "2013-11-22T17:39+09:00",
  "dcterms:modified": "2013-11-26T16:02+09:00",
  "description": "KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates.\r\n\r\nYamano Yasuaki of NetAgent Co.,Ltd. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000108.html",
  "sec:cpe": {
    "#text": "cpe:/a:kingsoft:kdrive",
    "@product": "KDrive Personal for Windows",
    "@vendor": "KINGSOFT, INC.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-000108",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN97810280/index.html",
      "@id": "JVN#97810280",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5999",
      "@id": "CVE-2013-5999",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-5999",
      "@id": "CVE-2013-5999",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2013-5999 (GCVE-0-2013-5999)

EUVD-2026-108374

FKIE_CVE-2013-5999

GHSA-RRWP-7W9C-GF2G

GSD-2013-5999

JVNDB-2013-000108

Tags

Sightings

Nomenclature

Related by attack behaviour