CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2020-155059.8/CRITICALEPSS 99.7%CISA KEV
2020-07-07

MobileIron Core, Connector, and Sentry Remote Code Execution (RCE) Vulnerability (CVE-2020-15505) Security Advisory

[Affected Scope] MobileIron Core & Connector versions 10.6.0.0 and earlier, Sentry versions 9.8.0 and earlier, Monitor & RDB versions 2.0.0.1 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code with system administrator privileges by sending specially crafted Hessian serialized data

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to sensitive service endpoints

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse