CVE-2018-2500

EPSS 0.3%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Dec 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information which would otherwise be restricted.

Affected products

SAP · SAP Mobile Secure for Android

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://launchpad.support.sap.com/#/notes/2707024 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699 http://www.securityfocus.com/bid/106157