medium5.9
CVE-2018-2460
SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection.
Impact
SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to do MITM attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Business One | Version 1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105309
- https://launchpad.support.sap.com/#/notes/2682503
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
- http://www.securityfocus.com/bid/105309
- https://launchpad.support.sap.com/#/notes/2682503
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993