Submitted by Cyber Security ... on Mon, 27/01/2014 - 14:12

Active VPN Bypass on Android KitKat - Disclosure Report

Following our second vulnerability report where we demonstrated an active VPN bypass on Android Jelly Bean 4.3 we have decided to further investigate the existence of the vulnerability on Android KitKat 4.4. At first we could not reproduce it with the original vulnerability code since KitKat has a modified security implementation.