CVE-2018-15661 - CVE House
Back to Database
Status published High CVE-2018-15661

An issue was discovered in the Ola Money (aka com.olacabs.olamoney)...

Vulnerability Description

An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android. If an attacker controls an application with accessibility permissions and the ability to read SMS messages, then the Forgot Password screen can be used to bypass authentication. NOTE: the vendor does not agree that this is a security issue requiring a fix

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-15661

Credits & Attribution

No credits recorded in the NVD database.

References

More from olacabs

View All →
CVE-2018-15660
An issue was discovered in the Ola Money (aka com.olacabs.olamoney)...
Medium 5.9

Affected Vendor

Affected Software

ola money
Vulnerable Versions:
1.9.0

Timeline

Official Publish: August 21st, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.