Login Request a demo
High severity · published Jul 7, 2020
CVE-2020-15507
An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows…
7.5
CVSS
2.2%
EPSS
No
On KEV
Description
An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Cloud · Mobileiron
through 10.6 · source: NVD
CO
Core · Mobileiron
through 10.6 · source: NVD
EC
Enterprise Connector · Mobileiron
through 10.6 · source: NVD
RD
Reporting Database · Mobileiron
through 10.6 · source: NVD
SE
Sentry · Mobileiron
through 10.6 · source: NVD
Affected product
CL
Cloud
Mobileiron
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-15507
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-15507
Vendor Advisory
https://www.mobileiron.com/en/blog/mobileiron-security-updates-available
More from Cloud
9.8
CVE-2020-15506
An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that…