description: Improper access control in knox_vpn_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data.
problem types: CWE-284 Improper Access Control
affected:
{
vendor: Samsung Mobile
product: Samsung Mobile Devices
versions:
version: S(12), status: affected, lessThan: SMR Oct-2022 Release 1, versionType: custom
}