8 matches found
CVE-2021-3198
By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...
Design/Logic Flaw
By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...
CVE-2021-3198: Improper Neutralization of Special Elements used in an OS Command
By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...
PT-2021-19614
Name of the Vulnerable Software and Affected Versions: Ivanti MobileIron Core versions prior to 11.1.0.0 Description: The issue allows an attacker to escape the restricted clish shell by abusing the 'install rpm url' command. This was fixed in version 11.1.0.0. Recommendations: For versions prior...
PT-2021-20906
Name of the Vulnerable Software and Affected Versions: Ivanti MobileIron Core versions prior to 11.1.0.0 Description: The issue allows an attacker to escape the restricted clish shell by abusing the 'install rpm info detail' command. This was fixed in version 11.1.0.0. Recommendations: For versio...
CVE-2021-3540: Improper Neutralization of Argument Delimiters in a Command
By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...
CVE-2021-3198
By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...
CVE-2021-3540
By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...