Medium · 6.5 CVE-2021-3540 EUVD-2021-26851GHSA-32qj-4pcr-vqhp

Ivanti MobileIron Core clish Restricted Shell Escape via Argument Injection

Published Jul 22, 2021 · Updated Sep 17, 2024 · Assigned by rapid7

Vendor: ivanti Product: MobileIron Core Category: Network devices

Description

By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	MobileIron Core	10.7.0.1-9 – ≤ 10.7.0.1-9, 11.0.0.1-3 – ≤ 11.0.0.1-3	—

References

https://www.rapid7.com/blog/post/2021/06/02/untitled-cve-2021-3198-and-cve-2021-3540-mobileiron-shell-escape-privilege-escalation-vulnerabilities/