CVE-2018-15660 - CVE House
Back to Database
Status published Medium CVE-2018-15660

An issue was discovered in the Ola Money (aka com.olacabs.olamoney)...

Vulnerability Description

An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker controls an application with accessibility permissions, then the attacker can read certain Ola Money data such as a credit card number, expiration date, bank account number, and transaction history. NOTE: the vendor does not agree that this is a security issue requiring a fix

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-15660

Credits & Attribution

No credits recorded in the NVD database.

References

More from olacabs

View All →
CVE-2018-15661
An issue was discovered in the Ola Money (aka com.olacabs.olamoney)...
High 7.5

Affected Vendor

Affected Software

olamoney
Vulnerable Versions:
1.9.0

Timeline

Official Publish: August 21st, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.