CVEvulnerability

CVE-2022-41210

5.2 MEDIUM Published 2022-10-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.2 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.2 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-338

Description

SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings.

Affected configurations

• sap customer data cloud 7.4

Related

Weakness · CWE (1)

  • CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) weakness

References