CVE-2014-5903: Medium severity mobileiron mobile@work vulnerability
The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5903?
CVE-2014-5903 is considered a high severity vulnerability due to its potential for man-in-the-middle attacks.
How do I fix CVE-2014-5903?
To fix CVE-2014-5903, upgrade the Mobile@Work application to the latest version that validates X.509 certificates properly.
What systems are impacted by CVE-2014-5903?
CVE-2014-5903 specifically affects Mobile@Work version 6.0.0.1.12R on Android devices.
What types of attacks can exploit CVE-2014-5903?
CVE-2014-5903 can be exploited through man-in-the-middle attacks that allow attackers to spoof SSL servers.
What data could be compromised due to CVE-2014-5903?
CVE-2014-5903 can lead to exposure of sensitive information transmitted between the Mobile@Work application and unverified SSL servers.