Description
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by intercepting a security-question response during the initial configuration of the application.
Unscored
CVE-2018-17108
EUVD-2018-8886GHSA-jxx3-3xcq-9jq9
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by interc…
Published Sep 16, 2018 · Updated Sep 17, 2024 · Assigned by mitre