CVE-2022-41210

2022-10-1100:00:00

CWE-338

sap

www.cve.org

sap customer data cloud

insecure random number generator

information disclosure

user settings modification

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

28.0%

JSON

SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SAP Customer Data Cloud (Gigya)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "7.4"
      }
    ]
  }
]