CVE-2018-2500

MEDIUM

SAP Mobile Secure <6.60.19942.0 SP28 1711 - Info Disclosure

Title source: llm
STIX 2.1

Description

Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information which would otherwise be restricted.

References (3)

Core 3
Core References
Permissions Required, Vendor Advisory x_refsource_misc
https://launchpad.support.sap.com/#/notes/2707024
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106157

Scores

CVSS v3 4.7
EPSS 0.0007
EPSS Percentile 22.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (1)
sap/mobile_secure < 6.60.19942.0
Published Dec 11, 2018
Tracked Since Feb 18, 2026