Mobileiron Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined6
Smartphone Operating System4

Produkt

MobileIron Virtual Smartphone Platform4
mobileiron Mobile@Work2
MobileIron Core2
MobileIron Connector2
MobileIron Agent2

Przeciwdziałanie

Official Fix6
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

Wykorzystywanie

High0
Functional2
Proof-of-Concept0
Unproven4
Not Defined4

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent4
Network6

Uwierzytelnianie

Not Defined0
High0
Low0
None10

Interakcja z użytkownikiem

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤60
≤76
≤82
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤62
≤76
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤62
≤76
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤90
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k8
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (5): Agent (2), Connector (3), Core (3), Mobile@Work (2), Virtual Smartphone Platform (3)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2021-03-302.62.6MobileIron Mobile@Work Lockout information disclosureNieznanyNot DefinedNot Defined0.000830.00CVE-2021-3391
2021-03-307.07.0MobileIron Agent weak encryptionNieznanyNot DefinedNot Defined0.004550.02CVE-2020-35138
2021-03-306.46.4MobileIron Agent API Key RegisterActivity.java weak authenticationNieznanyNot DefinedNot Defined0.002170.02CVE-2020-35137
2020-07-076.46.1MobileIron Core/Connector information disclosureNieznanyNot DefinedOfficial Fix0.005280.07CVE-2020-15507
2020-07-078.58.2MobileIron Core/Connector weak authenticationNieznanyNot DefinedOfficial Fix0.009870.00CVE-2020-15506
2020-07-078.57.9MobileIron Core/Connector privilege escalationNieznanyFunctionalOfficial Fix0.975190.00CVE-2020-15505
2014-09-156.36.3mobileiron Mobile@Work X.509 Certificate weak encryptionNieznanyNot DefinedNot Defined0.000490.00CVE-2014-5903
2014-04-026.45.5MobileIron Virtual Smartphone Platform AES-ECB-PKCS1.5 Key weak encryptionSmartphone Operating SystemUnprovenOfficial Fix0.001480.02CVE-2013-7286
2014-04-027.86.8MobileIron Virtual Smartphone Platform j_spring_security_check information disclosureSmartphone Operating SystemUnprovenOfficial Fix0.193950.04CVE-2014-1409
2013-06-104.44.0MobileIron Virtual Smartphone Platform show privilege escalationSmartphone Operating SystemProof-of-ConceptOfficial Fix0.000000.00

◂ PoprzedniPrzeglądKolejny ▸

Might our Artificial Intelligence support you?

Check our Alexa App!