CVE-2022-41210

CVE-2022-41210 affects SAP Customer Data Cloud (Gigya mobile app for Android) version 7.4. The issue is caused by an insecure random number generator, making it easy to predict future random numbers and enabling information disclosure and modification of certain user settings. Sources across mult...

CVE-2022-41209

CVE-2022-41209 affects SAP Customer Data Cloud (Gigya) mobile app for Android, version 7.4. The issue is an encryption implementation with insufficient diffusion that can reveal patterns, enabling information disclosure; in some scenarios, replay attacks may also be possible. The available docume...