CVE-2022-41209

MEDIUM

SAP Customer Data Cloud Gigya mobile app for Android <7.4 - Info Di...

Title source: llm
STIX 2.1

Description

SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses encryption method which lacks proper diffusion and does not hide the patterns well. This can lead to information disclosure. In certain scenarios, application might also be susceptible to replay attacks.

References (2)

Core 2

Scores

CVSS v3 5.2
EPSS 0.0016
EPSS Percentile 5.7%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-326
Status published
Products (1)
sap/customer_data_cloud 7.4
Published Oct 11, 2022
Tracked Since Feb 18, 2026