CVE-2018-2460

SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to do MITM attack.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cna@sap.com

Published

2018-09-11

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Business One (Sap)
• Sap Business One Android Application (Sap)

References

• http://www.securityfocus.com/bid/105309
• https://launchpad.support.sap.com/#/notes/2682503
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993