Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection.
Date: 2017-05
Affected: vmware/airwatch_agent, vmware/airwatch_inbox
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2017-4895
CVSS: 8.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)

Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploitation of this issue may result in an enrolled device having unrestricted access over local Airwatch security controls and data.


Mitigations:

Architectural layers (MAESTRO):