Android Root Detection Vulnerability in Airwatch Agent by VMware

CVE-2017-4895

What is CVE-2017-4895?

The Airwatch Agent for Android contains a significant vulnerability that may enable malicious actors to circumvent root detection mechanisms. When successfully exploited, this flaw allows an enrolled device to bypass critical security controls imposed by Airwatch, granting unauthorized access to sensitive data and the potential to manipulate local security settings. Organizations using this software should implement necessary measures to mitigate the risk posed by this vulnerability.

References