PT-2020-7601 · Mobileiron · Mobileiron Sentry+1

Published 2020-01-08 · Updated 2020-01-10 · CVE-2014-1409

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions MobileIron VSP versions prior to 5.9.1 MobileIron Sentry versions prior to 5.0

Description The issue is related to an authentication bypass due to an XML file containing obfuscated passwords.

Recommendations For MobileIron VSP versions prior to 5.9.1, update to version 5.9.1 or later. For MobileIron Sentry versions prior to 5.0, update to version 5.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-91

Related Identifiers

CVE-2014-1409

Affected Products

Mobileiron Sentry

Mobileiron Vsp

References · 4

• 🔥 http://seclists.org/fulldisclosure/2014/Apr/21 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-1409 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92351 · Note
• https://packetstormsecurity.com/files/cve/CVE-2014-1409 · Note