PatchTheCVEmobile\@work vulnerabilities and fixes
Recent CVEs affecting mobile\@work, with upgrade or downgrade steps. 4 tracked.
mobile\@work has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-03-29. Highest priority: CVE-2020-35138 (score 61/100).
- CVE-2021-3391 MEDIUM 5.3 UPGRADE UPGRADE MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexiste
- CVE-2020-35138 CRITICAL 9.8 UPGRADE UPGRADE The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encry
- CVE-2020-35137 HIGH 7.5 UPGRADE UPGRADE The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate
- CVE-2014-5903 MEDIUM 5.4 DOWNGRADE The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates fr
FAQ
How do I fix mobile\@work vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mobile\@work being exploited right now?
None of the tracked mobile\@work CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mobile\@work CVE should I patch first?
CVE-2020-35138 currently ranks highest (61/100): The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encry.