CVE-2020-25055

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O(8.x) software Samsung mobile devices with P(9.0) software Samsung mobile devices with Q(10.0) software

Description An issue was discovered that allows attackers, who control an unprivileged SecureFolder process, to bypass admin restrictions in KnoxContainer.

Recommendations For Samsung mobile devices with O(8.x) software, update to a version that includes the fix for this issue. For Samsung mobile devices with P(9.0) software, update to a version that includes the fix for this issue. For Samsung mobile devices with Q(10.0) software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the persona service to minimize the risk of exploitation.