← Back

Olacabs

olacabs

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Olamoney
olamoney
1 CVE
Ola Money
ola_money
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-15661
1Olacabs
1Ola Money
Nov 21, 2024
Aug 21, 2018
N/A· v4
7.5 HIGH· v3
2.6 LOW· v2
An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker controls an application with accessibility permissions and the ability to read SMS messages, then the Forg...Show more
An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker controls an application with accessibility permissions and the ability to read SMS messages, then the Forgot Password screen can be used to bypass authentication. NOTE: the vendor does not agree that this is a security issue requiring a fixShow less
CVE-2018-15660
1Olacabs
1Olamoney
Nov 21, 2024
Aug 21, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker controls an application with accessibility permissions, then the attacker can read certain Ola Money data...Show more
An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker controls an application with accessibility permissions, then the attacker can read certain Ola Money data such as a credit card number, expiration date, bank account number, and transaction history. NOTE: the vendor does not agree that this is a security issue requiring a fixShow less