← Back

CVE-2022-41209

nvd nist
Published: Oct 11, 2022Modified: May 20, 2025

JSON object

Loading...
5.2
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Exploitability: 0.9 / Impact: 4.2
Source: NVD

Description

SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses encryption method which lacks proper diffusion and does not hide the patterns well. This can lead to information disclosure. In certain scenarios, application might also be susceptible to replay attacks.

Affected (1)

Sap
1 product
Customer Data Cloud
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Customer Data Cloud
Version 7.4

Related CWEs

CWE-326
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (4)

Source: cna@sap.com
Permissions RequiredVendor Advisory
Source: cna@sap.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.