6.5
Medium
CVE-2021-3540 By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions…
Description
By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MobileIron Core | 11.0.0.1-3 | No fix stated |
| MobileIron Core | 10.7.0.1-9 | No fix stated |
References
- www.rapid7.com www.rapid7.com
Timeline
- Published
- Last modified