BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
AirWatch Self Service Portal Username Parameter LDAP Injection Apr 04 2017 06:48AM
Patrick Webster (patrick osisecurity com au)
https://www.osisecurity.com.au/airwatch-self-service-portal-username-par
ameter-ldap-injection.html

Date:
04-Apr-2017

Product:
AirWatch Self Service MDM

Versions affected:
v6.1.x
v6.4.x

Vulnerability:
LDAP injection

Example:
https://[target]/DeviceManagement/ URL accepts the following
POST param...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus