deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-19217
Published: 2018-11-12
Description: In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not reproduce for that version according to the maintainer or a reliable third-party
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1643753; https://bugzilla.redhat.com/show_bug.cgi?id=1643753
CVE: CVE-2018-19218
Published: 2018-11-12
Description: In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1643758; https://bugzilla.redhat.com/show_bug.cgi?id=1643758
CVE: CVE-2018-19219
Published: 2018-11-12
Description: In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1643760; https://bugzilla.redhat.com/show_bug.cgi?id=1643760
CVE: CVE-2018-19220
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#getshell; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#getshell
CVE: CVE-2018-19221
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#sql-injection; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#sql-injection
CVE: CVE-2018-19222
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. It allows a /install/mysql_hy.php?riqi=0&i=0 attack to reset the admin password, even if install.txt exists.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#reset-admin-password; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#reset-admin-password
CVE: CVE-2018-19223
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. It allows XSS via the first input field to the admin/type.php?id=1 URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss2; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss2
CVE: CVE-2018-19224
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-565
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#unauthorized-access; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#unauthorized-access
CVE: CVE-2018-19225
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. admin/mima.php has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#csrf; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#csrf
CVE: CVE-2018-19226
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /data/0/admin.txt URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#info_exp; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#info_exp
CVE: CVE-2018-19227
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/liuyan.php neirong[] parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss1; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss1
CVE: CVE-2018-19228
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory traversal in the admin/pic.php del parameter, as demonstrated by deleting install/install.txt to permit a reinstallation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#del-file; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#del-file
CVE: CVE-2018-19229
Published: 2018-11-12
Description: An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss3; https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#xss3
CVE: CVE-2018-19244
Published: 2018-11-13
Description: An XML External Entity (XXE) vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "Charles Settings.xml" file from an attacker, an intranet network may be accessed and information may be leaked.
CVSS Score: 8.6 (HIGH)
CWE: CWE-611
References: https://whitehatck01.blogspot.com/2018/11/charles-427-xml-external-entity.html; https://whitehatck01.blogspot.com/2018/11/charles-427-xml-external-entity.html
CVE: CVE-2018-19246
Published: 2018-11-13
Description: PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/Athlon1600/php-proxy-app/issues/134; https://www.exploit-db.com/exploits/45861/; https://github.com/Athlon1600/php-proxy-app/issues/134
CVE: CVE-2018-18591
Published: 2018-11-13
Description: A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200
References: https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176; https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176
CVE: CVE-2018-15452
Published: 2018-11-13
Description: A vulnerability in the DLL loading component of Cisco Advanced Malware Protection (AMP) for Endpoints on Windows could allow an authenticated, local attacker to disable system scanning services or take other actions to prevent detection of unauthorized intrusions. To exploit this vulnerability, the attacker would need to have administrative credentials on the Windows system. The vulnerability is due to the improper validation of resources loaded by a system process at run time. An attacker could exploit this vulnerability by crafting a malicious DLL file and placing it in a specific location on the targeted system. A successful exploit could allow the attacker to disable the targeted system's scanning services and ultimately prevent the system from being protected from further intrusion. There are no workarounds that address this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.securityfocus.com/bid/105759; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181029-amp-dll; http://www.securityfocus.com/bid/105759
CVE: CVE-2018-15771
Published: 2018-11-13
Description: Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105916; http://www.securitytracker.com/id/1042059; https://seclists.org/fulldisclosure/2018/Nov/34
CVE: CVE-2018-15772
Published: 2018-11-13
Description: Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the existence of any system file via Boxmgmt CLI.
CVSS Score: 7.1 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/105916; http://www.securitytracker.com/id/1042059; https://seclists.org/fulldisclosure/2018/Nov/34
CVE: CVE-2018-15795
Published: 2018-11-13
Description: Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-338
References: http://www.securityfocus.com/bid/105915; https://pivotal.io/security/cve-2018-15795; http://www.securityfocus.com/bid/105915
CVE: CVE-2018-1293
Published: 2018-11-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-16850
Published: 2018-11-13
Description: postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://www.securityfocus.com/bid/105923; http://www.securitytracker.com/id/1042144; https://access.redhat.com/errata/RHSA-2018:3757
CVE: CVE-2018-17187
Published: 2018-11-13
Description: The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification mode was explicitly configured, client and server modes previously defaulted as documented to not verifying a peer certificate, with options to configure this explicitly or select a certificate verification mode with or without hostname verification being performed. The latter hostname verifying mode was not implemented in Apache Qpid Proton-J versions 0.3 to 0.29.0, with attempts to use it resulting in an exception. This left only the option to verify the certificate is trusted, leaving such a client vulnerable to Man In The Middle (MITM) attack. Uses of the Proton-J protocol engine which do not utilise the optional transport TLS wrapper are not impacted, e.g. usage within Qpid JMS. Uses of Proton-J utilising the optional transport TLS wrapper layer that wish to enable hostname verification must be upgraded to version 0.30.0 or later and utilise the VerifyMode#VERIFY_PEER_NAME configuration, which is now the default for client mode usage unless configured otherwise.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/105935; https://issues.apache.org/jira/browse/PROTON-1962; https://mail-archives.apache.org/mod_mbox/qpid-users/201811.mbox/%3CCAFitrpQSV73Vz7rJYfLJK7gvEymZSCR5ooWUeU8j4jzRydk-eg%40mail.gmail.com%3E
CVE: CVE-2018-1792
Published: 2018-11-13
Description: IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code that could be executed with root privileges. IBM X-Force ID: 148947.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/105936; https://exchange.xforce.ibmcloud.com/vulnerabilities/148947; https://www.ibm.com/support/docview.wss?uid=ibm10734447
CVE: CVE-2018-1808
Published: 2018-11-13
Description: IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://www.securitytracker.com/id/1042034; https://exchange.xforce.ibmcloud.com/vulnerabilities/149828; https://www-01.ibm.com/support/docview.wss?uid=ibm10735905
CVE: CVE-2018-6260
Published: 2018-11-13
Description: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://support.lenovo.com/us/en/solutions/LEN-26250; https://nvidia.custhelp.com/app/answers/detail/a_id/4738; https://nvidia.custhelp.com/app/answers/detail/a_id/4772
CVE: CVE-2018-12416
Published: 2018-11-13
Description: The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an unauthenticated user to perform cross-site request forgery (CSRF). Affected releases are TIBCO Software Inc. TIBCO DataSynapse GridServer Manager: versions up to and including 5.2.0; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; 6.2.0; 6.3.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/105913; https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-13-2018-tibco-datasynapse-gridserver-manager; http://www.securityfocus.com/bid/105913
CVE: CVE-2018-14655
Published: 2018-11-13
Description: A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via the 'state'-parameter in the authentication URL. This allows an XSS-Attack upon succesfully login.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/errata/RHSA-2018:3592; https://access.redhat.com/errata/RHSA-2018:3593; https://access.redhat.com/errata/RHSA-2018:3595
CVE: CVE-2018-14657
Published: 2018-11-13
Description: A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
CVSS Score: 8.1 (HIGH)
CWE: CWE-307, CWE-307
References: https://access.redhat.com/errata/RHSA-2018:3592; https://access.redhat.com/errata/RHSA-2018:3593; https://access.redhat.com/errata/RHSA-2018:3595
CVE: CVE-2018-14658
Published: 2018-11-13
Description: A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://access.redhat.com/errata/RHSA-2018:3592; https://access.redhat.com/errata/RHSA-2018:3593; https://access.redhat.com/errata/RHSA-2018:3595
CVE: CVE-2018-7910
Published: 2018-11-13
Description: Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C 8.0.0.129(C432), 8.0.0.137(C432) have an authentication bypass vulnerability. When the attacker obtains the user's smartphone, the vulnerability can be used to replace the start-up program so that the attacker can obtain the information in the smartphone and achieve the purpose of controlling the smartphone.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181101-01-bypass-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181101-01-bypass-en
CVE: CVE-2018-7925
Published: 2018-11-13
Description: The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181105-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181105-01-smartphone-en
CVE: CVE-2018-7926
Published: 2018-11-13
Description: Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to improper permission configuration for specific operations, an attacker who obtained the Huawei ID bound to the watch can bypass permission verification to perform specific operations and modify some data on the watch.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-01-watch-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-01-watch-en
CVE: CVE-2018-2473
Published: 2018-11-13
Description: SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/105903; https://launchpad.support.sap.com/#/notes/2657670; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2476
Published: 2018-11-13
Description: Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/105898; https://launchpad.support.sap.com/#/notes/2658755; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2477
Published: 2018-11-13
Description: Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source.
CVSS Score: 8.8 (HIGH)
CWE: CWE-91
References: http://www.securityfocus.com/bid/105901; https://launchpad.support.sap.com/#/notes/2661740; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2478
Published: 2018-11-13
Description: An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the <sid>adm user. The commands executed depend upon the privileges of the <sid>adm user.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/bid/105904; https://launchpad.support.sap.com/#/notes/2675696; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2479
Published: 2018-11-13
Description: SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105902; https://launchpad.support.sap.com/#/notes/2676094; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2481
Published: 2018-11-13
Description: In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code a malicious user may execute unauthorized transaction functionality.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/105906; https://launchpad.support.sap.com/#/notes/2693083; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2482
Published: 2018-11-13
Description: SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Install the Mobile Secure Android client released in Mid-Oct 2018.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105900; https://launchpad.support.sap.com/#/notes/2695896; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2483
Published: 2018-11-13
Description: HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console (CMC) by changing request method.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/105899; https://launchpad.support.sap.com/#/notes/2647714; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2485
Published: 2018-11-13
Description: It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and calling device specific JavaScript APIs in the application. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.
CVSS Score: 7.7 (HIGH)
References: http://www.securityfocus.com/bid/105911; https://launchpad.support.sap.com/#/notes/2691126; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2487
Published: 2018-11-13
Description: SAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file provided by users: When extracted in specific use cases, files within this zip file can land in different locations than the originally intended extraction point.
CVSS Score: 8.3 (HIGH)
References: http://www.securityfocus.com/bid/105908; https://launchpad.support.sap.com/#/notes/2701410; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
CVE: CVE-2018-2488
Published: 2018-11-13
Description: It is possible for a malware application installed on an Android device to send local push notifications with an empty message to SAP Fiori Client and cause the application to crash. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.
CVSS Score: 7.8 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2691126; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832; https://launchpad.support.sap.com/#/notes/2691126
CVE: CVE-2018-2489
Published: 2018-11-13
Description: Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://launchpad.support.sap.com/#/notes/2691126; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832; https://launchpad.support.sap.com/#/notes/2691126
CVE: CVE-2018-2490
Published: 2018-11-13
Description: The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://launchpad.support.sap.com/#/notes/2691126; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832; https://launchpad.support.sap.com/#/notes/2691126
CVE: CVE-2018-2491
Published: 2018-11-13
Description: When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malicious JavaScript code it can eventually run inside the built-in log viewer of the application in case user opens the viewer and taps on the hyperlink in the viewer. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://launchpad.support.sap.com/#/notes/2691126; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832; https://launchpad.support.sap.com/#/notes/2691126