PT-2020-15915
CVE-2020-25055
·
تاريخ النشر
2020-08-31
·
تاريخ التحديث
2020-09-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Samsung mobile devices with O(8.x) software
Samsung mobile devices with P(9.0) software
Samsung mobile devices with Q(10.0) software
Description
An issue was discovered that allows attackers, who control an unprivileged SecureFolder process, to bypass admin restrictions in KnoxContainer.
Recommendations
For Samsung mobile devices with O(8.x) software, update to a version that includes the fix for this issue.
For Samsung mobile devices with P(9.0) software, update to a version that includes the fix for this issue.
For Samsung mobile devices with Q(10.0) software, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the persona service to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾