VULNERABILITY INTELLIGENCE

CVE-2022-41210

CVSS score5.2 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2022-10-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

SAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings.

Weakness classification

  • cna@sap.com: CWE-338

Primary references