Lucene search
HistoryOct 11, 2022 - 9:15 p.m.
CVE-2022-41210
sap customer data cloud
android app
version 7.4
insecure
random number generator
information disclosure
user settings modification
CVSS3
5.2
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS
0.001
Percentile
28.0%
SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings.
Affected configurations
Node
sapcustomer_data_cloudMatch7.4android
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sap | customer_data_cloud | 7.4 | cpe:2.3:a:sap:customer_data_cloud:7.4:*:*:*:*:android:*:* |
Related
cve
cve
CVE-2022-41210
2022-10-11 21:15:26
prion
prion
Information disclosure
2022-10-11 21:15:00
cvelist
cvelist
CVE-2022-41210
2022-10-11 00:00:00
cnvd
cnvd
SAP Customer Data Cloud Security Feature Issue Vulnerability
2022-10-13 00:00:00
CVSS3
5.2
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS
0.001
Percentile
28.0%
Related for NVD:CVE-2022-41210