The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encrypted.
Date: 2018-09
Affected: vmware/intelligent_hub
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2018-6975
CWE: CWE-311
CVSS: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encrypted.


Mitigations:

Architectural layers (MAESTRO):