Information Disclosure Vulnerability in Samsung Knox on Galaxy S9

CVE-2019-6744

Summary

A vulnerability in Samsung Knox allows local attackers with physical access to Galaxy S9 devices running version 1.2.02.39 to bypass authentication mechanisms of the Secure Folder. This flaw arises from insufficient validation during lock screen handling, enabling unauthorized disclosure of sensitive data contained within the secure container. Attackers can exploit this weakness to gain insight into personal and confidential information stored in the Secure Folder.

References