Skip to content
6.5 Medium

CVE-2021-3198 By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of…

Description

By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

Affected products and versions

Product Affected versions Fixed in
MobileIron Core 11.0.0.1-3 No fix stated
MobileIron Core 10.7.0.1-9 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of MobileIron Core →
Track this CVE