5

I found following global readable files in /storage/emulated/0/data/IMS:

cert.pem

private_key.pem

I have full access to this files with my file-manager/text-editor, so I think any other app will have full access too! It seems to be a privacy/security issue.

Information:

Cert.pem line 6: "Issuer: CN=Samsung RCS Client"

(Wikipedia: RCS="Rich Communication Services") I moved private_key.pem to another directory, it has been replaced by a new different private_key.pem file.

Is this a possible security risk?

Improve this question
10
  • Congrats to your find! And now what's your question? :)
    – Izzy ♦
    Jan 5, 2016 at 18:54
  • Thank you for reply. Don't we have a new security problem if any app can read or modify this files?
    – user144834
    Jan 5, 2016 at 19:01
  • 1
    Not sure who "we" is. Point is, from the location, that belongs to "some app" (and not the system). Apart from that, it's something Samsung specific. And there's nothing "we" can do about it. Maybe you should report it to the dev of the related app? "IMS", whatever that is?
    – Izzy ♦
    Jan 5, 2016 at 19:12
  • 1
    looks like it's connected to a messenger client ?
    – moonbutt74
    Jan 5, 2016 at 19:20
  • 1
    But it is nothing we can solve here. Only the devs of the related app can.
    – Izzy ♦
    Jan 5, 2016 at 19:53

1 Answer 1

Reset to default
2

A globally-readable private key is almost certainly a vulnerability. A globally-readable certificate is generally not. You appear to have both, so you've very likely found a vulnerability.

Your next step would be to either report it to the vendor (probably Samsung) or find a security researcher who can investigate further.

According to a blog post, Samsung Mobile security issues can be sent to mobile.security@samsung.com. In theory, that email should be staffed by someone clueful about security (unlike first-tier customer support), so you should get a reasonable response. When contacting them, you should let them know about this question, so they realize it's already been disclosed.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .