Security Bulletin: Instability in the Kiosk Android (CVE-2020-4353)

Summary

Instability in the Kiosk Android Application leads to a bypass in MDM Restrictions

Vulnerability Details

CVEID:CVE-2020-4353
**DESCRIPTION:**IBM MaaS360 could allow a user with physical access to the device to crash the application, which may enable the user to access restricted applications and device settings.
CVSS Base score: 4.6
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/178505 for the current score.
CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

Update to 6.90 or later of MaaS360 Android Mobile Application.

Workarounds and Mitigations

None