optiv

4 exploits Active since Oct 2020
CVE-2020-15931 NOMISEC HIGH WORKING POC
Netwrix Account Lockout Examiner < 5.1 - Information Disclosure
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator (that is configured within the product in its installation state) by generating a single Kerberos Pre-Authentication Failed (ID 4771) event on a Domain Controller.
27 stars
CVSS 7.5
CVE-2020-35137 WRITEUP HIGH WORKING POC
MobileIron <2021-03-22 - Info Disclosure
The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS discovery API, as demonstrated by Mobile@Work (aka com.mobileiron). The key is in com/mobileiron/registration/RegisterActivity.java and can be used for api/v1/gateway/customers/servers requests. NOTE: Vendor states that this is an opt-in feature to the product - it is not enabled by default and customers cannot enable it without an explicit email to support. At this time, they do not plan change to make any changes to this feature.
CVSS 7.5
CVE-2020-35138 WRITEUP CRITICAL WORKING POC
MobileIron <2021-03-22 - Info Disclosure
The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/password details during the authentication process, as demonstrated by Mobile@Work (aka com.mobileiron). The key is in the com/mobileiron/common/utils/C4928m.java file. NOTE: It has been asserted that there is no causality or connection between credential encryption and the MiTM attack
CVSS 9.8
CVE-2021-3391 WRITEUP MEDIUM WORKING POC
MobileIron Mobile@Work <2021-03-22 - Info Disclosure
MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user accounts by observing the number of failed login attempts needed to produce a Lockout error message
CVSS 5.3