CVE-2020-35137

The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS discovery API, as demonstrated by Mobile@Work aka com.mobileiron. The key is in com/mobileiron/registration/RegisterActivity.java and can be used for...

MobileIron agents 信任管理问题漏洞

MobileIron agents is a software application from MobileIron, Inc. It is used for MobileIron agents. A trust management issue vulnerability exists in versions of MobileIron agents prior to 2021-03-22, which stems from the inclusion of a hard-coded API key used to communicate with the MobileIron Sa...

The vulnerability of WebSphere Application Server for application servers allows attackers to increase their privileges.

The vulnerability of the Discovery programming interface implementation in WebSphere Application Server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by using an external reference in the Swagger document...