CVE-2020-15505
Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Platforms (CPE)
📦
Mobileiron
Core
< 10.3.0.4📦
Mobileiron
Core
>= 10.4.0.0 and < 10.4.0.4📦
Mobileiron
Core
>= 10.5.1.0 and < 10.5.1.1📦
Mobileiron
Core
>= 10.5.2.0 and < 10.5.2.1📦
Mobileiron
Core
>= 10.6.0.0 and < 10.6.0.1📦
Mobileiron
Enterprise Connector
< 10.3.0.4📦
Mobileiron
Enterprise Connector
>= 10.4.0.0 and < 10.4.0.4📦
Mobileiron
Enterprise Connector
>= 10.5.1.0 and < 10.5.1.1📦
Mobileiron
Enterprise Connector
>= 10.5.2.0 and < 10.5.2.1📦
Mobileiron
Enterprise Connector
>= 10.6.0.0 and < 10.6.0.1📦
Mobileiron
Monitor And Reporting Database
< 2.0.0.2📦
Mobileiron
Sentry
>= 9.7.0 and < 9.7.3📦
Mobileiron