Description (CNA)
Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/537339/100/0/threaded
- http://www.securityfocus.com/archive/1/537318/100/0/threaded
ADP enrichment
No English description supplied.