CVE-2018-2500

Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information which would otherwise be restricted.

Score

CVSS 3.0 4.7 Medium

Status

Modified - cna@sap.com

Published

2018-12-11

Last modified

2024-08-05

Affected products

• Mobile Secure (Sap)
• Sap Mobile Secure For Android (Sap)

References

• http://www.securityfocus.com/bid/106157
• https://launchpad.support.sap.com/#/notes/2707024
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699