CVE-2018-17404

The CVE-2018-17404 vulnerability affects the SBIbuddy app (com.sbi.erupee) for Android, specifically versions 1.41 and 1.42. The description indicates an information disclosure flaw that could allow an attacker to sniff sensitive data such as mobile numbers, PAN numbers from government IDs, and d...

CVE-2018-17108

The CVE-2018-17108 entry concerns the SBIbuddy (com.sbi.erupee) Android app versions 1.41 and 1.42, where an attacker could achieve an Account Takeover by intercepting the security-question response during initial configuration. Affected component is the Android app; root cause is described in th...