CVE-2018-17404 The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile number, PAN number (from a government-issued ID), and date o...
MediumCVSS 5.3
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile number, PAN number (from a government-issued ID), and date of birth.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sbi buddy | = 1.41 | No fix listed |
| sbi buddy | = 1.42 | No fix listed |
References
- github.com exploit third-party-advisory