{"id":"CVE-2013-10001","state":"PUBLISHED","title":"HTC One/Sense Mail Client certificate validation","description":"A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used.","publishedAt":"2022-05-17T07:30:14.000Z","updatedAt":"2025-04-15T14:40:22.649Z","severity":{"score":4.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","source":"VulDB"},"assigner":"VulDB","products":["HTC One","HTC Sense"],"affected":[{"vendor":"HTC","product":"One","versions":[{"version":"4.x","status":"affected"}]},{"vendor":"HTC","product":"Sense","versions":[{"version":"4.x","status":"affected"}]}],"references":["http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/","https://vuldb.com/?id.8900"],"weaknesses":["CWE-295"],"ingestedAt":"2026-10-29T19:40:36.859Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2013/10xxx/CVE-2013-10001.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2013-10001","state":"PUBLISHED","datePublished":"2022-05-17T07:30:14.000Z","dateUpdated":"2025-04-15T14:40:22.649Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2022-05-17T00:00:00.000Z"},"containers":{"cna":{"title":"HTC One/Sense Mail Client certificate validation","descriptions":[{"lang":"en","value":"A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used."}],"affected":[{"vendor":"HTC","product":"One","versions":[{"version":"4.x","status":"affected"}]},{"vendor":"HTC","product":"Sense","versions":[{"version":"4.x","status":"affected"}]}],"references":[{"url":"http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/","tags":["x_refsource_MISC"]},{"url":"https://vuldb.com/?id.8900","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulDB","dateUpdated":"2022-05-17T07:30:14.000Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5"},"credits":[{"lang":"en","value":"Max Moser/Martin Schobert"}],"x_generator":"vuldb.com","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@vuldb.com","ID":"CVE-2013-10001","REQUESTER":"cna@vuldb.com","STATE":"PUBLIC","TITLE":"HTC One/Sense Mail Client certificate validation"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"One","version":{"version_data":[{"version_value":"4.x"}]}},{"product_name":"Sense","version":{"version_data":[{"version_value":"4.x"}]}}]},"vendor_name":"HTC"}]}},"credit":"Max Moser/Martin Schobert","data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used."}]},"generator":"vuldb.com","impact":{"cvss":{"baseScore":"4.8","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-295 Improper Certificate Validation"}]}]},"references":{"reference_data":[{"name":"http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/","refsource":"MISC","url":"http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/"},{"name":"https://vuldb.com/?id.8900","refsource":"MISC","url":"https://vuldb.com/?id.8900"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://vuldb.com/?id.8900","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T18:09:17.228Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-14T17:14:59.267706Z","id":"CVE-2013-10001","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-15T14:40:22.649Z"}}]}}}