CVE-2020-35138: Use of Hard-coded Credentials

The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/password details during the authentication process, as demonstrated by Mobile@Work aka com.mobileiron. The key is in the...

CVE-2014-5903

The Mobile@Work aka com.mobileiron application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5903

The CVE-2014-5903 entry describes a vulnerability in the Mobile@Work (com.mobileiron) Android app version 6.0.0.1.12R where the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and disclose sensitive information via a crafted certifica...