[Onapsis Security Advisory 2015-011] SAP Mobile Platform DataVault Predictable encryption passwords for Configuration Values

Posted by Onapsis Research Labs on Aug 12

Onapsis Security Advisory 2015-011: SAP Mobile Platform DataVault
Predictable encryption passwordsfor Configuration Values

1. Impact on Business
———————

By exploiting this vulnerability an attacker with access to a vulnerable
mobile device would be able to decrypt and modify sensitive configuration
values used by SAP business applications.

Risk Level: High

2. Advisory Information
———————–

* Public Release…

Leave a Reply