CVE-2014-1409

CRITICAL 9.1CVE-2014-1409 · Published 08/01/2020 · updated 17/06/2026

In short

CVE-2014-1409 is a CRITICAL (CVSS 9.1) vulnerability affecting sentry (mobileiron), virtual smartphone platform (mobileiron).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.6% of all vulnerabilities.
Fix: update to 5.0, 5.9.1 or later.

Package	Affected versions	Patched versions
sentry mobileiron	`< 5.0`	`5.0`
virtual smartphone platform mobileiron	`< 5.9.1`	`5.9.1`

Description

MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords

References

seclists.org/fulldisclosure/2014/Apr/21 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/92351 · Third Party Advisory
packetstormsecurity.com/files/cve/CVE-2014-1409 · Third Party Advisory

More vulnerabilities in sentry

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sentry

mobileiron

< 5.0

5.0

virtual smartphone platform

mobileiron

< 5.9.1

5.9.1

More vulnerabilities in sentry

See all →