[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fo99CnfLFFY717pBONvD48NOepigGd4s6v29_xIan2oo":3,"g5a-risk:CVE-2019-6744":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":60,"references":61,"referencesCount":60,"weaknesses":73,"weaknessesCount":60,"isActivelyExploited":89,"cisaInfo":27,"otxData":27,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":129,"notableEvents":130},"CVE-2019-6744","What is CVE-2019-6744?","This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung Galaxy S9 build G9600ZHS3ARL1 Secure Folder. An attacker must first obtain physical access to the device in order to exploit this vulnerability. The specific flaws exists within the the handling of the lock screen for Secure Folder. The issue results from the lack of proper validation that a user has correctly authenticated. An attacker can leverage this vulnerability to disclose the contents of the secure container. Was ZDI-CAN-7381.","This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung Galaxy S9 build G9...","2020-02-10T21:53:39.41","2020-10-19T19:42:38.983",4.3,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","PHYSICAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,0.7,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"zdi-disclosures@trendmicro.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:P\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":22,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":42,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","LOCAL","PARTIAL",2.1,3.9,2.9,0.00364,[47,47,47,47,47,47,47],"Medium",[51,56],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"samsung","knox","1.2.02.39","cpe:2.3:a:samsung:knox:1.2.02.39:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":58,"criteria":59,"vulnerable":4},"galaxy_s9","-","cpe:2.3:h:samsung:galaxy_s9:-:*:*:*:*:*:*:*",2,[62,67],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fsecurity.samsungmobile.com\u002FsecurityUpdate.smsb","Samsungmobile",[66],"Not Applicable",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-19-515\u002F","Zerodayinitiative",[71,72],"Third Party Advisory","VDB Entry",[74,82],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":81},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar",false,[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2019-6744? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-6744, a medium severity cyber security vulnerability from 2020. This vulnerability allows local attackers to disclose sens...","CVE-2019-6744, CVE-2019-6744 vulnerability, CVE-2019-6744 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, samsung security, knox vulnerability, galaxy_s9 vulnerability","\u002Fwhat-is\u002Fcve-2019-6744",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-6744","Cybersecurity","CVE-2019-6744, CVE-2019-6744 vulnerability, CVE-2019-6744 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":118,"Negate":27,"Nodes":119},"AND",[120,125],{"Operator":121,"Negate":27,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A3BF44F4-2469-47AD-AE4D-C49B9F774CE1",{"Operator":121,"Negate":27,"CPEMatch":126},[127],{"Vulnerable":27,"Criteria":59,"MatchCriteriaID":128,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3CE4730C-0430-429C-9723-76219B46F092",[],[],{"lastModified":11,"cacheTime":132,"version":40},1792490760996,{"score":134,"band":135,"action":136,"scoredAt":137},14,"Info","Track","2026-10-20T06:43:29.483072+00:00"]