Design/Logic Flaw

2018-09-1115:29:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.1%

JSON

SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to do MITM attack.

CPENameOperatorVersion
business_oneeq1.2

CPE	Name	Operator	Version
	business_one	eq	1.2

References

www.securityfocus.com/bid/105309

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993