CVE-2018-2500

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information which would otherwise be restricted.

Metrics

CVSS 3.0 4.7/10CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 11, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-250016.5An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free.CVE-2018-250028.8uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This prCVE-2018-250044.9A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find querCVE-2018-250074.3Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 throuCVE-2018-250085.9In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchronization issue can be lCVE-2018-250099.1A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().CVE-2018-250109.1A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().CVE-2018-250119.8A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().CVE-2018-250129.1A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().CVE-2018-250139.1A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().CVE-2018-250149.8A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().CVE-2018-250157.8An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off,
CVE-2018-2500: Medium severity, CVSS 4.7 | Vulnix