CVE-2021-3198

By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@rapid7.com

Published

2021-07-22

Last modified

2024-09-16

Weaknesses

CWE-78

Affected products

• Mobileiron (Ivanti)
• Mobileiron Core (Ivanti)

References

• https://www.rapid7.com/blog/post/2021/06/02/untitled-cve-2021-3198-and-cve-2021-3540-mobileiron-shell-escape-privilege-…