The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application.
https://support.cybozu.com/ja-jp/article/9479
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-2287
http://www.securityfocus.com/bid/96842