CVE-2019-6744 — Improper Access Control in Samsung Knox

CWE-284 — Improper Access ControlCWE-287 — Improper Authentication3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 71.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Samsung Knox
Timeline
PublishedFeb 10
Latest updateMay 24

Description

This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung Galaxy S9 build G9600ZHS3ARL1 Secure Folder. An attacker must first obtain physical access to the device in order to exploit this vulnerability. The specific flaws exists within the the handling of the lock screen for Secure Folder. The issue results from the lack of proper validation that a user has correctly authenticated. An attacker can leverage this vuln…

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 0.7 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5samsung/knox1.2.02.39 on Samsung Galaxy S9 build G9600ZHS3ARL1
▶NVDsamsung/knox1.2.02.39

🔴Vulnerability Details

2
GHSA
GHSA-vr56-g7hp-gjv6: This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1↗2022-05-24
▶
CVEList
CVE-2019-6744: This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1↗2020-02-10
▶
CVE-2019-6744 — Improper Access Control in Samsung Knox | cvebase