ZDI-CAN-7381: Samsung Knox Secure Folder Lock Screen Bypass Vulnerability
This vulnerability allows local attackers to disclose sensitive information on vulnerability installations of Samsung Secure Folder. An attacker must first obtain physical access to the device in order to exploit this vulnerability. The specific flaws exists within the the handling of the lock screen for Secure Folder. The issue results from the lack of proper validation that a user has correctly authenticated. An attacker can leverage this vulnerability to disclose the contents of the secure container.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-7381?
The severity of ZDI-CAN-7381 is categorized as high due to the potential for sensitive information disclosure.
How do I fix ZDI-CAN-7381?
To fix ZDI-CAN-7381, it is recommended to update to the latest security patches provided by Samsung for the KNOX software.
Who is affected by ZDI-CAN-7381?
ZDI-CAN-7381 affects users of Samsung Secure Folder within the Samsung KNOX environment.
What type of attack does ZDI-CAN-7381 enable?
ZDI-CAN-7381 enables local attackers with physical access to the device to disclose sensitive information.
Is it necessary for an attacker to have physical access for ZDI-CAN-7381?
Yes, an attacker must have physical access to the device to exploit the ZDI-CAN-7381 vulnerability.