CVE-2022-41210
5.2 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.1%
SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| sap:customer_data_cloud | sap customer data cloud | eq | 7.4 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "SAP Customer Data Cloud (Gigya)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "7.4"
}
]
}
]Related
5.2 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.1%