Privilege Escalation

Moodle is vulnerable to privilege escalation attacks. The attacks are possible due to a flaw in the self-enrollment functionality. The flaw allows an authenticated user to leverage a role from teacher to manager level without authorization...

Device limit per user in Enrollment profiles not being enforced MAM-only

Enrollment Profiles has been set to limit users on specific delivery groups to a certain limit of devices per user. This should prevent people on these delivery groups from activating Secure Hub on more devices than they are allowed. However, these users are still able to activate with no...

DEP devices fail to complete enrollment using basic enrollment

XenMobile basic enrollments do not occur when the device is initially activated. The administrator is required to perform an over the air or Secure Hub enrollment. This issue can be identified because "Device Enrollment Program User" a local user" "Device Enrollment Program Group" a local group...

The vulnerability of the iOS operating system, which allows a hacker to bypass cryptographic security measures

The vulnerability of the iOS operating system’s Profiles component is related to insufficient encryption strength. Exploiting this vulnerability allows a malicious actor to infiltrate the vulnerable Simple Certificate Enrollment Protocol SCEP component and circumvent cryptographic security measur...

Enable XenMobile Enrollment of iOS and Android Devices with Azure AD as Identity Provider

With the latest version XenMobile server, you are provided with a new feature where an end user can use their Azure Active Directory credentials to enroll their Windows, iOS and Android devices to the XenMobile server. In this case Azure Active Directory will be the Identity provider and XenMobil...

CVE-2017-2380

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the Simple Certificate Enrollment Protocol SCEP implementation in the "Profiles" component. It allows remote attackers to bypass cryptographic protection mechanisms by leveraging DES support...

How to Enable Azure Active Directory Enrollment of Windows 10 Devices with XenMobile

When a Windows device is joined to Azure Active Directory, the device can be automatically enrolled in XenMobile. To enable this, add the XenMobile enrollment URL to Azure Active Directory as detailed in this article. You can join Windows 10 devices to Microsoft Azure AD in any of the following...

Xenmobile : MDM and MAM Console Features

There's a lot to consider while deciding the enrollment mode MDM/MAM to the XenMobile environment. What devices should you choose? How should you manage them? What are the devices features available from the console etc. How do you ensure that your network remains secure while still being user...

How to Configure XenMobile Server from MDM and MAM to MDM Only

This article describes how to configure XenMobile Server from MDM and MAM enrollments to MDM only...

Authentication fails on Secure Hub Error "Check the credentials and try again"

Authentication fails on Secure Hub. Cannot enroll devices...

CVE-2016-3128

A spoofing vulnerability in the Core of BlackBerry Enterprise Server BES 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a devi...

CVE-2016-3128

CVE-2016-3128 affects the Core of BlackBerry Enterprise Server (BES) versions 12 through 12.5.2. The vulnerability enables remote attackers to enroll an illegitimate device, access device parameters, or send false information to the BES by leveraging information about a legitimately enrolled devi...

CVE-2016-3128: Undefined Security Weakness

A spoofing vulnerability in the Core of BlackBerry Enterprise Server BES 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a devi...

PT-2017-8346

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server versions 12 through 12.5.2 Description A spoofing issue in the Core of BlackBerry Enterprise Server allows remote attackers to enroll an illegitimate device, gain access to device parameters, or send false...

Error: "Profile Installation Failed A Network Error Has Occurred" during XenMobile iOS Enrollment

XenMobile iOS enrollment getting error "Profile Installation Failed A network error has occurred" iOS console logs show: Xens-iPhone profiled148 : Error MC: URL request to https://mdmxms.domain.net:8443/zdm/scep/sp-078435ec-0aed-4ba0-bb3d-be665934be12?operation=GetCACert&message=APPLEPROFILE...

iOS DEP enrollment may fail when updating the trusted anchor certificates used to trust the SSL connection to the MDM server

After you enable iOS bulk enrollment, the upgrade of the trusted anchor certificates may cause the iOS DEP enrollment or re-enrollment failure. The issue may occur when you change from a self-signed certificate to a public certificate, purchase a certificate from a new provider, or move to an...

XenMobile: Error during enrollment "could not connect to the server"

During the enrollment for IOS devices you receive the error "Could not connect to the server " during the installation of the Profiles. In the XMS Server debug logs we would see: "UserDeviceLimitExceededException"...

XMS is unable to connect to DEP - Error: "Connection failed" when testing the connection

In the XMS console, inside iOS Bulk Enrollment DEP Configuration, when importing the Token file from the DEP Portal, the connectivity test is failing with error "Connection Failed". However, XMS connectivity tests are showing that XMS is able to reach Apple's websites, the ports are correctly...

Second profile fails on iOS enrollments - Connection to the server could not be established

Second profile installation failing on iOS device: "Error: Connection to the server could not be established" Device logs: Desc : Profile Installation Failed Sugg : A connection to the server could not be established. Domain : MCInstallationErrorDomain Code : 4001 Server logs: Refused request...

Preparing iOS Devices for Supervised Mode.

The objective of this document is to explain how user can prepare his device in Supervise Mode using Apple Configurator 2 and enroll his device with XenMobile to apply iOS device policies...