CVE-2019-6744

CVE-2019-6744 affects Samsung Knox 1.2.02.39 on Samsung Galaxy S9 (Secure Folder). Root cause: improper validation in the lock-screen handling that fails to confirm proper user authentication, allowing a local attacker to disclose contents of the secure container. Public coordinated disclosures r...

CVE-2019-6744: Improper Access Control

This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung Galaxy S9 build G9600ZHS3ARL1 Secure Folder. An attacker must first obtain physical access to the device in order to exploit this vulnerability. The specific...

PT-2019-18304 · Samsung · Samsung Knox

Name of the Vulnerable Software and Affected Versions: Samsung Knox version 1.2.02.39 Description: This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain physical access to the device to exploit this. The flaw exists within the...

Samsung Knox Secure Folder Lock Screen Bypass Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerability installations of Samsung Secure Folder. An attacker must first obtain physical access to the device in order to exploit this vulnerability. The specific flaws exists within the the handling of the lock...

Security Bulletin: IBM Data Science Experience Local is affected by a Use of Hard-coded Password vulnerability

Summary IBM Data Science Experience Local has addressed the following vulnerability. Password for Data Science Experience Local Hadoop Integration Knox Gateway was hard-coded. Password for Data Science Experience Local Keystore and Truststore was hard-coded. Credentials for Data Science Experienc...

FAQ : Enterprise Application Silent Installation

Question: Is it possible to upgradeEnterprise appsby using'silent installation' on mobile devices? Answer: The 'silent installation' of apps means that the user of the device does not receive any prompts to update or install the app. Instead, the app updates or installsitself automatically in the...

CVE-2017-10963

In Knox SDS IAM Identity Access Management and EMM Enterprise Mobility Management 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container without the user's knowledge by inspecting network traffic from a Samsung server and injecting conten...

Information disclosure

In Knox SDS IAM Identity Access Management and EMM Enterprise Mobility Management 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container without the user's knowledge by inspecting network traffic from a Samsung server and injecting conten...

CVE-2017-10963

In Knox SDS IAM Identity Access Management and EMM Enterprise Mobility Management 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container without the user's knowledge by inspecting network traffic from a Samsung server and injecting conten...

CVE-2017-10963

In Knox SDS IAM Identity Access Management and EMM Enterprise Mobility Management 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container without the user's knowledge by inspecting network traffic from a Samsung server and injecting conten...

CVE-2017-10963

CVE-2017-10963 – Samsung Knox : In Knox SDS IAM and EMM 16.11 on Samsung devices, a man‑in‑the‑middle attacker can inspect traffic from a Samsung server and inject content during the update sequence, allowing installation of arbitrary apps into the Knox container without user knowledge. These app...

PT-2018-5308

Name of the Vulnerable Software and Affected Versions Knox SDS IAM and EMM version 16.11 Description A man-in-the-middle attacker can install any application into the Knox container without the user's knowledge by inspecting network traffic from a Samsung server and injecting content at a certain...

CVE-2017-10963: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In Knox SDS IAM Identity Access Management and EMM Enterprise Mobility Management 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container without the user's knowledge by inspecting network traffic from a Samsung server and injecting conten...

XenMobile Samsung Knox and Android for work integration

XenMobile + Samsung Knox bulk enrollment + AFW integration CurrentlyKnox bulk enrollment and Android for Work enrollment are not supported in conjunction with each other – only one of them can be chosen as the enrollment mode. Created an Enhancement Request to include this feature in the Roadmap...

Applications and Device Policies are failing on Samsung Knox Devices -XenMobile

Experiencing issues with Samsung KNOX Enabled devices - Enrolment loop encountered. - Policies/ Apps Deployment failures. If the devices are removed from KNOX KME portal. Reset done and manually enrolled, no issues encountered...

Allow access to Secure Hub.apk file for Samsung Knox enrollment

Entering the path to the Secure Hub.apk file is not working when trying to enroll in Samsung Knox...

Apache Knox User Emulation Vulnerability

Apache Knox is an application gateway for Apache Hadoop deployments to interact with the REST API and UI from the Apache Software Foundation. A user emulation vulnerability exists in Apache Knox versions 0.2.0 through 0.11.0. An attacker can exploit the vulnerability by impersonating another user...

Escalation Of Privileges

Apache Knox is vulnerable to privilege escalation. This is possible due to a flaw in the handling of authentication in WebHDFS through knox. It allows authenticated users to impersonate another user and potentially access unauthorized data or escalate privileges. The attack attempts are logged an...

Code injection

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...

CVE-2017-5646

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...