description: Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication.
problem types: CWE-269: Improper Privilege Management
affected:
{
product: Knox Mobile Enrollment
vendor: Samsung Mobile
versions:
lessThan: KCS 1.39, status: affected, version: -, versionType: custom
}
metrics:
other: [
content: {'vectorString': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N'}
type: unknown
]