CVE-2017-4896: Low severity VMware Airwatch Agent Android vulnerability
Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4896?
CVE-2017-4896 has a moderate severity level due to the potential unauthorized disclosure of confidential data.
How does CVE-2017-4896 affect Airwatch Inbox and Airwatch Agent?
CVE-2017-4896 affects Airwatch Inbox and Airwatch Agent on rooted Android devices, allowing unauthorized access to local encrypted data.
What types of devices are vulnerable to CVE-2017-4896?
CVE-2017-4896 primarily affects rooted Android devices that use Airwatch Inbox or Airwatch Agent.
What data is at risk with CVE-2017-4896?
CVE-2017-4896 poses a risk of unauthorized disclosure of confidential data stored locally by the applications.
Is there a patch available for CVE-2017-4896?
A patch for CVE-2017-4896 has been recommended in updates to the affected VMware products.