Local Notification Crash Vulnerability in SAP Fiori Client for Android
CVE-2018-2488

7.8HIGH

Key Information:

Vendor

SAP
Status
SAP Fiori Client
Vendor
CVE Published:
13 November 2018

What is CVE-2018-2488?

A malware application on an Android device can exploit the local push notification feature of the SAP Fiori Client, resulting in the application crashing when it attempts to process empty messages. Users must upgrade to the latest version, 1.11.5, available on the Google Play store to safeguard against this exploit.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SAP Fiori Client < 1.11.5

References

https://launchpad.support.sap.com/#/notes/2691126
x_refsource_MISC
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.