CVE-2013-7286 – MobileIron VSP / Sentry Authentication Bypass

https://notcve.org/view.php?id=CVE-2013-7286

02 Apr 2014 — MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm MobileIron VSP versiones anteriores a 5.9.1 y Sentry versiones anteriores a 5.0, poseen un algoritmo débil de ofuscación de contraseña. MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 suffer from password obfuscation and XPath injection vulnerabilities. • https://packetstorm.news/files/id/125990 • CWE-326: Inadequate Encryption Strength •