CVE-2022-35290 - Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted

HIGH

Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted

Published Aug 9, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.79%

Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted.

Vendor SAP SE Product SAP Authenticator for Android Default
unknown
Affected
- ≥ unspecified, < 1.2.17

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
SAP SE	SAP Authenticator for Android	unknown	Affected ≥ unspecified, < 1.2.17

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38180		Advisory
https://launchpad.support.sap.com/#/notes/3216653		x_refsource_MISCPermissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html		x_refsource_MISCVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sap

Published Aug 9, 2022

Updated Mar 9, 2026

Reserved Jul 7, 2022

CISA Vulnrichment

Updated Mar 6, 2026

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner sap

Published Aug 9, 2022

Updated Mar 9, 2026

GitHub

No data