CVE-2013-7286 – MobileIron VSP / Sentry Authentication Bypass

https://notcve.org/view.php?id=CVE-2013-7286

MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm MobileIron VSP versiones anteriores a 5.9.1 y Sentry versiones anteriores a 5.0, poseen un algoritmo débil de ofuscación de contraseña. MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 suffer from password obfuscation and XPath injection vulnerabilities. • http://seclists.org/fulldisclosure/2014/Apr/21 https://exchange.xforce.ibmcloud.com/vulnerabilities/92352 • CWE-326: Inadequate Encryption Strength •