PT-2021-20906 · Ivanti · Ivanti Mobileiron Core

William Vu · Published 2021-07-22 · Updated 2021-08-04 · CVE-2021-3540

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Ivanti MobileIron Core versions prior to 11.1.0.0

Description: The issue allows an attacker to escape the restricted clish shell by abusing the 'install rpm info detail' command. This was fixed in version 11.1.0.0.

Recommendations: For versions prior to 11.1.0.0, update to version 11.1.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the 'install rpm info detail' command until the update is applied.

Exploit

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2021-3540

Affected Products

Ivanti Mobileiron Core

References · 3

• 🔥 https://rapid7.com/blog/post/2021/06/02/untitled-cve-2021-3198-and-cve-2021-3540-mobileiron-shell-escape-privilege-escalation-vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-3540 · Security Note
• https://osv.dev/vulnerability/CVE-2021-3540 · Vendor Advisory