CVE-2021-3198mediumCWE-78

CVE-2021-3198: medium-severity vulnerability in Ivanti MobileIron Core

Ivanti MobileIron Core clish Restricted Shell Escape via OS Command Injection

Published · Updated

Follow this CVE+ Monitor MobileIron Core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 3.3%
By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
Ivanti · MobileIron Core
Related CVEs — Ivanti MobileIron Core

In the same product, most dangerous first.

CVE-2021-3540MEDIUMIvanti MobileIron Core clish Restricted Shell Escape via Argument InjectionEPSS 3.3%