CVE-2022-41210

{"id": "CVE-2022-41210", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.2, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 0.9}]}, "published": "2022-10-11T21:15:26.617", "references": [{"url": "https://launchpad.support.sap.com/#/notes/3248384", "tags": ["Permissions Required", "Vendor Advisory"], "source": "cna@sap.com"}, {"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html", "tags": ["Vendor Advisory"], "source": "cna@sap.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-338"}]}], "descriptions": [{"lang": "en", "value": "SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings.\n\n"}, {"lang": "es", "value": "SAP Customer Data Cloud (Gigya mobile app for Android) - versi\u00f3n 7.4, usa un programa generador de n\u00fameros aleatorios no seguro que facilita al atacante la predicci\u00f3n de futuros n\u00fameros aleatorios. Esto puede conllevar a una divulgaci\u00f3n de informaci\u00f3n y la modificaci\u00f3n de determinadas configuraciones del usuario"}], "lastModified": "2023-11-07T03:52:44.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:customer_data_cloud:7.4:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "1892A616-7928-43CF-BB88-B9E03C2E6755"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}