CVE-2018-2490

HIGH

SAP Fiori Client < 1.11.5 - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.

References (2)

Core 2
Core References
Permissions Required, Vendor Advisory x_refsource_misc
https://launchpad.support.sap.com/#/notes/2691126

Scores

CVSS v3 7.8
EPSS 0.0011
EPSS Percentile 29.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-732
Status published
Products (1)
sap/fiori_client < 1.11.5
Published Nov 13, 2018
Tracked Since Feb 18, 2026