Vulnerability Details CVE-2018-2460
SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to do MITM attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.2%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
References
- http://www.securityfocus.com/bid/105309
- https://launchpad.support.sap.com/#/notes/2682503
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
- http://www.securityfocus.com/bid/105309
- https://launchpad.support.sap.com/#/notes/2682503
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
Products affected by CVE-2018-2460
-
cpe:2.3:a:sap:business_one:1.2