Skip to content
OpenAdvisories
High · 7.8 CVE-2021-33669 EUVD-2021-20346

Under certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file st…

Published Jun 9, 2021 · Updated Aug 3, 2024 · Assigned by sap

Description

Under certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file storage. For a successful exploitation user interaction from another user is required and could lead to complete impact of confidentiality integrity and availability.

Affected products

VendorProductAffectedFixed
SAP SE SAP Mobile SDK Certificate Provider < 3.0.8 —

References