Man-in-the-Middle Vulnerability in Samsung Knox Identity and Access Management

CVE-2017-10963

Summary

A vulnerability exists in Samsung's Knox Identity Access Management and Enterprise Mobility Management solutions, specifically version 16.11, which can be exploited by a man-in-the-middle attacker. This type of attacker can eavesdrop on network communications from a Samsung server and inject malicious content during an application's update sequence. Consequently, this allows the attacker to install unauthorized applications into the Knox container without user awareness. Once inside the container, these applications may have the capability to exfiltrate sensitive information stored within, posing a significant risk to user data integrity and security.

References