4.7med
CVE-2018-2500
Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information…
Published 7 y ago · modified 4 mo ago · JSON
CVSS
4.7
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 24%
Public exploits
0
none known
Summary
Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information which would otherwise be restricted.
Exploit prediction (EPSS)
0.31% probability of exploitation in the next 30 days, higher than 24% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 4.7 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 1.9 | AV:L/AC:M/Au:N/C:P/I:N/A:N |
Affected products
- SAP SAP Mobile Secure for Android
References
- wiki.scn.sap.com /wiki/pages/viewpage.action?pageId=508559699 · x_refsource_MISC, x_transferred
- launchpad.support.sap.com /#/notes/2707024 · x_refsource_MISC, x_transferred
- securityfocus.com /bid/106157 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2018-2500
- NVD: CVE-2018-2500
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.