Unscored CVE-2018-2460 EUVD-2018-14315GHSA-cxpc-qvxx-9xpw

SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to d…

Published Sep 11, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP Business One Android application Platform: Android

Description

SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to do MITM attack.

Affected products

Vendor	Product	Affected	Fixed
SAP	SAP Business One Android application	= 1.2	—

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
105309 vdb-entry
https://launchpad.support.sap.com/#/notes/2682503