CVE-2018-2460

Опубликовано: 11 сент. 2018

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to do MITM attack.

Ссылки

http://www.securityfocus.com/bid/105309
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2682503
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
Vendor Advisory
http://www.securityfocus.com/bid/105309
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2682503
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sap:business_one:1.2:*:*:*:*:android:*:*

EPSS

Процентиль: 34%

0.00136

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-cxpc-qvxx-9xpw