writeups.xyz / MobileIron MDM Contains Static Key Allowing Account Enumeration

Submitter : c2a

Date: 22 March 2021

Bounty : undisclosed

Vulnerabilities :

• Android
• Hardcoded API Keys
• Username Enumeration

Programs :

• Ivanti (MobileIron)

Authors :

• Matt Burch (@Emptynebuli)

Link :
https://emptynebuli.github.io/tooling/2021/03/22/rustyiron.html