Описание
Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.
Ссылки
- Mailing ListThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 1.0 (включая)
cpe:2.3:a:samsung:knox:*:*:*:*:*:*:*:*
EPSS
Процентиль: 21%
0.00066
Низкий
4.7 Medium
CVSS3
1.9 Low
CVSS2
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 4.7
github
больше 3 лет назад
Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.
EPSS
Процентиль: 21%
0.00066
Низкий
4.7 Medium
CVSS3
1.9 Low
CVSS2
Дефекты
CWE-200