Weak eCryptFS Key Generation in Samsung KNOX 1.0 Exposing Sensitive Data

CVE-2016-1919

What is CVE-2016-1919?

Samsung KNOX 1.0 employs a flawed eCryptFS key generation algorithm, which significantly increases the risk of sensitive information being compromised. Local users may exploit this weakness by leveraging knowledge of the TIMA key to execute brute-force attacks, potentially gaining unauthorized access to encrypted data.

References