writeups.xyz / Abusing AirWatch MDM Services to Bypass MFA

Submitter : c2a

Date: 11 December 2020

Bounty : undisclosed

Vulnerabilities :

• Android
• 2FA / MFA Bypass
• Username Enumeration

Programs :

• VMware (AirWatch)

Authors :

• Matt Burch (@Emptynebuli)

Link :
https://emptynebuli.github.io/tooling/2020/12/11/aircross.html