9.1
CVE-2014-1409
- EPSS 0.36%
- Veröffentlicht 08.01.2020 16:15:10
- Zuletzt bearbeitet 21.11.2024 02:04:14
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mobileiron ≫ Virtual Smartphone Platform Version < 5.9.1
Mobileiron ≫ Sentry Version < 5.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.579 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|
CWE-91 XML Injection (aka Blind XPath Injection)
The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.