CVE-2018-15661

An issue was discovered in the Ola Money aka com.olacabs.olamoney application 1.9.0 for Android. If an attacker controls an application with accessibility permissions and the ability to read SMS messages, then the Forgot Password screen can be used to bypass authentication. NOTE: the vendor does...

CVE-2018-15661

The vulnerability CVE-2018-15661 affects Ola Money (com.olacabs.olamoney) on Android 1.9.0. If an attacker controls an app with accessibility permissions and the ability to read SMS, the Forgot Password screen can bypass authentication. The issue is triggered by the interaction of accessibility f...