critical9.1
CVE-2014-1409
MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords
Impact
MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mobileiron | Virtual Smartphone Platform | before 5.9.1 |
| Mobileiron | Sentry | before 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Apr/21
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92351
- https://packetstormsecurity.com/files/cve/CVE-2014-1409
- http://seclists.org/fulldisclosure/2014/Apr/21
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92351
- https://packetstormsecurity.com/files/cve/CVE-2014-1409