Medium severity5.3NVD Advisory· Published Mar 29, 2021· Updated Jun 17, 2026

CVE-2021-3391

Description

MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user accounts by observing the number of failed login attempts needed to produce a Lockout error message

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MobileIron/Mobile@Workdescription
Mobileiron/Mobile\@workllm-fuzzy

Patches

Vulnerability mechanics

References

www.optiv.com/explore-optiv-insights/source-zero/mobileiron-mdm-contains-static-key-allowing-account-enumerationnvdTechnical DescriptionThird Party Advisory
www.mobileiron.com/en/blog/mobileiron-security-updates-availablenvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000