CVE-2016-3996 – KNOX 2.3 Clipboard Data Disclosure

https://notcve.org/view.php?id=CVE-2016-3996

17 Apr 2016 — ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a crafted application. ClipboardDataMgr en Samsung KNOX 1.0.0 y 2.3.0 no verifica adecuadamente a quien llama, lo que permite a usuarios locales leer datos de portapapeles de KNOX a través de una aplicación manipulada. KNOX versions 1.0 through 2.3 on Android suffer from a clipboard data disclosure vulnerability. • https://packetstorm.news/files/id/136710 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •