CVE-2018-17402

The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to discover the Credit/Debit card number…

published September 23, 2018

CVSS
—
EPSS
1%
Percentile
64.3
In the wild
Unconfirmed
What it is

The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to discover the Credit/Debit card number, expiration date, and CVV number. NOTE: the vendor says that, to exploit this, the user has to explicitly install a malicious app and provide accessibility permission to the malicious app, that the Android platform provides fair warnings to the users before turning on accessibility for any application, and that it believes it is similar to installing malicious keyboards, or malicious apps taking screenshots

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01063 · 64.3th percentile
Published
2018-09-23T22:00Z
EPSS history
Timeline
  • 23 SEP 22:00Z
    The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to discover the Credit/Debit card number…
    cvelistv5