CVE-2021-3198 - Ivanti MobileIron Core clish Restricted Shell Escape via OS Command Injection

Back Back to CVE browser

HIGH

Ivanti MobileIron Core clish Restricted Shell Escape via OS Command Injection

Published Jul 22, 2021

7.2

HIGH

CVSS 3.1

EPSS 3.31%

Description

By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

Affected products

Vendor Ivanti Product MobileIron Core Default
n/a
- Version
  10.7.0.1-9
  Status
  affected
  Constraints
  <=10.7.0.1-9
- Version
  11.0.0.1-3
  Status
  affected
  Constraints
  <=11.0.0.1-3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ivanti

MobileIron Core

n/a

Version	Status	Constraints
10.7.0.1-9	affected	<=10.7.0.1-9
11.0.0.1-3	affected	<=11.0.0.1-3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26538
Advisory
https://www.rapid7.com/blog/post/2021/06/02/untitled-cve-2021-3198-and-cve-2021-3540-mobileiron-shell-escape-privilege-escalation-vulnerabilities/
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26538		Advisory
https://www.rapid7.com/blog/post/2021/06/02/untitled-cve-2021-3198-and-cve-2021-3540-mobileiron-shell-escape-privilege-escalation-vulnerabilities/		x_refsource_MISCExploitThird Party Advisory