| Package | Affected versions | Patched versions |
|---|---|---|
| mobileiron | ≥ 11.0.0.0, < 11.1.0.0≤ 10.7.0.1-9 | 11.1.0.0 |
By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free