VYPR

MobileIron agents

by Mobileiron

CVEs (2)

  • CVE-2020-35138CriMar 29, 2021
    risk 0.64cvss 9.8epss 0.01

    The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/password details during the authentication process, as demonstrated by Mobile@Work (aka com.mobileiron). The key is in the…

  • CVE-2020-35137HigMar 29, 2021
    risk 0.49cvss 7.5epss 0.02

    The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS discovery API, as demonstrated by Mobile@Work (aka com.mobileiron). The key is in com/mobileiron/registration/RegisterActivity.java and can be…