XenMobile 10 MDM SSL Offload Configuration

A Citrix XenMobile environment is typically configured with a NetScaler appliance that front ends and load balances the MDM traffic which it passes on to the XenMobile Servers in the backend. This NetScaler can be configured to handle this traffic in either SSL Bridge or SSL Offload mode. Though...

Mobile Applications Leak Device, Location Data

Both Android and iOS apps leak data, leaving users vulnerable to data theft, denial-of-service attacks, and remote SIM card rooting. In a report released Thursday “Are mobile apps a leaky tap in the enterprise?” researchers at Zscaler assert that Android and iOS users are equally vulnerable to a...

XenMobile Duplicate MAM ID issue

Deployments of XenMobile 10.x may encounter an issue where Enterprise enrolled devices are not correctly associated with the appropriate MAM ID for the device. This results in issues where devices end up in a state of ‘MDM no MAM’ or ‘Cannot install applications, despite seeing them listed in...

FAQ: Rooted\Jailbroken Device Detection in XenMobile MAM Only Mode

Q: Can devices in XenMobile MAM only mode detect rooted\jailbroken devices? A : The jailbreak flag which is present on the XenMobile server console which shows whether a device is jailbroken or not is only supported when the device is enrolled to MDM. The jailbreak flag is set by MDM and not by M...

Apple iOS MDM Profile Signing Bypass

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of signed...

XenMobile: How to enroll MAC OS X to XMS Server

How to enroll MAC OS X device to XenMobile MDM...

AppTec MDM for Samsung legacy - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AppTec MDM for Samsung legacy published at the 'play' market has multiple vulnerabilities...

AppTec MDM Agent - Customized SSL, Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AppTec MDM Agent published at the 'play' market has multiple vulnerabilities...

Unable to access the Store on the Mobile device if XenMobile is behind firewall

When trying device enrollment in MDM+MAM mode, user was unable to reach the Store...

CVE-2016-1766

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

Code injection

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

CVE-2016-1766

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

CVE-2016-1766

The CVE-2016-1766 entry concerns Apple iOS profiles: a certificate validation flaw in the Profiles component prior to iOS 9.3 allows spoofing of an MDM profile trust relationship. The ZDI advisory (ZDI-16-314) states the flaw is in how signed MDM profiles’ certificates are checked, enabling remot...

PT-2016-1542

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Description The issue is related to the Profiles component in Apple iOS, which does not properly validate certificates. This allows attackers to spoof an MDM profile trust relationship via unspecified vectors. T...

CVE-2016-1766: Undefined Security Weakness

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

Code injection

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2015-4960

The IBM InfoSphere Master Data Management Collaborative Edition (GDS component) is vulnerable to clickjacking (and related client-side issues) in versions 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1. An attacker could remotely lure an authenticated...

MDM the mobile terminal management system of the SAP Afaria stored XSS vulnerability using process-vulnerability warning-the black bar safety net

Here, will demo on SAP Afaria, a world-renowned MDM mobile terminal management software for the vulnerability analysis,while the analysis of the network how could an attacker exploit the vulnerability to attack. The black bar safety net Wikipedia: what is MDM? In short, MDM is to help...

iOS sandboxing vulnerabilities increase the enterprise data risk level-vulnerability warning-the black bar safety net

Appthority researchers found a present in the iOS sandboxed application vulnerabilities in the iOS 8.4.1 the following version of the system will be affected, anyone can use this vulnerability to access the System Management Application Configuration. Sandbox vulnerability-QuickSand Due to this...

iOS Sandbox Vulnerability Puts Enterprise Data at Risk

"Change is the only constant thing," as it is known could be now modified as "Change is the only constant thing," where the means Terms and conditions apply! A change Mobile Device Management solutions-MDM, Bring Your Own Device-BYOD was brought to the organizations, which later became necessitie...