Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88970
HistoryOct 13, 2022 - 12:00 a.m.

SAP Customer Data Cloud Security Feature Issue Vulnerability

2022-10-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
sap customer data cloud
sap germany
customer identity and access management
security vulnerability
random number generator
information disclosure
user settings manipulation

0.001 Low

EPSS

Percentile

28.1%

SAP Customer Data Cloud is a tool from SAP Germany that provides digital customer identity and access management, enabling companies to collect, aggregate and manage customer data across multiple touch points and applications. SAP Customer Data Cloud version 7.4 contains a security feature issue vulnerability that stems from the use of an insecure random number generator program, which could be exploited by an attacker to easily predict future random numbers, leading to information disclosure and modification of certain user settings.

CPENameOperatorVersion
sap customer data cloudeq7.4

0.001 Low

EPSS

Percentile

28.1%

Related for CNVD-2022-88970