Design/Logic Flaw

2021-06-0914:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

JSON

Under certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file storage. For a successful exploitation user interaction from another user is required and could lead to complete impact of confidentiality integrity and availability.

CPENameOperatorVersion
mobile_sdk_certificate_providerlt3.0.8

CPE	Name	Operator	Version
	mobile_sdk_certificate_provider	lt	3.0.8

References

github.com/SAP/mobilesdk-certificateprovider/security/advisories/GHSA-r2j9-h6q9-cq8g