CVE-2023-27895: Privilege Defined With Unsafe Actions

SAP Authenticator for Android - version 1.3.0, allows the screen to be captured, if an authorized attacker installs a malicious app on the mobile device. The attacker could extract the currently views of the OTP and the secret OTP alphanumeric token during the token setup. On successful...

CVE-2022-35290: Exposure of Sensitive Information to an Unauthorized Actor

Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted...