CVE-2016-1919

Published: Jan 27, 2017Modified: May 13, 2026

4.7

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.0 / Impact: 3.6

Source: NVD

Description

Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.

Affected (1)

Products: Samsung: Knox

Samsung

1 product

Knox

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Samsung Knox	Up to 1.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-310

References (8)

http://lists.openwall.net/bugtraq/2016/01/17/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/135303/Samsung-KNOX-1.0-Weak-eCryptFS-Key-Generation.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/537319/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/537340/100/0/threaded

Source: cve@mitre.org

http://lists.openwall.net/bugtraq/2016/01/17/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/135303/Samsung-KNOX-1.0-Weak-eCryptFS-Key-Generation.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/537319/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/537340/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.