CVE-2018-15660

CVE-2018-15660 describes a vulnerability in the Ola Money Android application (version 1.9.0) where an attacker controlling an application with accessibility permissions could read sensitive user data, including credit card numbers, bank account details, and transaction history. This medium-severity vulnerability (CVSS 5.9) has a network attack vector and high confidentiality impact, but requires high attack complexity as it relies on specific accessibility permissions. There is no evidence of active exploitation, public exploit code, or significant community discussion, and the vendor disputes it as a security issue requiring a fix.