MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.
Product
mobileiron virtual smartphone platform vulnerabilities
2 published CVES affecting mobileiron virtual smartphone platform, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 2
- High
- 0
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest mobileiron virtual smartphone platform CVEs
Newest publication first
-
CriticalCVSS 9.8 EPSS 1.4%
-
CriticalCVSS 9.1 EPSS 4.0%
MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.