CVE-2017-4895

8.8HIGH

Key Information:

Vendor
Vmware
Status
Airwatch Agent
Vendor
CVE Published:
10 May 2017

Summary

Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploitation of this issue may result in an enrolled device having unrestricted access over local Airwatch security controls and data.

Affected Version(s)

Airwatch Agent x.x

References

http://www.vmware.com/us/security/advisories/VMSA-2017-00...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/95892
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1037738
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.