Insecure Random Number Generation in SAP Customer Data Cloud Mobile App for Android

CVE-2022-41210

Summary

The SAP Customer Data Cloud mobile application for Android version 7.4 is affected by a vulnerability due to its use of an insecure random number generator. This deficiency allows attackers to predict future random numbers generated by the application, leading to potential information disclosure and unauthorized modification of user settings. The nature of this vulnerability raises significant concerns regarding the overall security of user data and the integrity of user accounts.

References