Beveiligingsadvies

CVE-2020-35137

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-03-29 00:00:00

Laatst bijgewerkt 2024-08-04 16:55:10

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS discovery API, as demonstrated by Mobile@Work (aka com.mobileiron). The key is in com/mobileiron/registration/RegisterActivity.java and can be used for api/v1/gateway/customers/servers requests. NOTE: Vendor states that this is an opt-in feature to the product - it is not enabled by default and customers cannot enable it without an explicit email to support. At this time, they do not plan change to make any changes to this feature.

← Alle CVE's bekijken Bekijk op cve.org ↗