CVE-2018-2490

HIGH

SAP Fiori Client < 1.11.5 - Unprotected Broadcast Message Exposure

Title source: llm
STIX 2.1

Description

The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.

References (2)

Core 2
Core References
Permissions Required, Vendor Advisory x_refsource_misc
https://launchpad.support.sap.com/#/notes/2691126

Scores

CVSS v3 7.8
EPSS 0.0075
EPSS Percentile 50.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-732
Status published
Products (1)
sap/fiori_client < 1.11.5
Published Nov 13, 2018
Tracked Since Feb 18, 2026