CVE-2020-15507
First published: Tue Jul 07 2020(Updated: )
An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mobileiron Cloud | <=10.6 | |
| MobileIron Core | <=10.6 | |
| Ivanti MobileIron Multiple Products | <=10.6 | |
| Mobileiron Reporting Database | <=10.6 | |
| Mobileiron Sentry | <=10.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-15507?
CVE-2020-15507 is an arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier 10.4.0.0 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0.
How does CVE-2020-15507 affect MobileIron products?
CVE-2020-15507 affects MobileIron Core, MobileIron Cloud, Ivanti MobileIron Multiple Products, MobileIron Reporting Database, and MobileIron Sentry versions up to and including 10.6.
How can an attacker exploit CVE-2020-15507?
A remote attacker can exploit CVE-2020-15507 to read files on the system using unspecified vectors.
What is the severity of CVE-2020-15507?
CVE-2020-15507 has a severity level of 7.5 (High).
Are there any security updates available for CVE-2020-15507?
Yes, security updates are available for CVE-2020-15507. Please refer to the MobileIron website for more information.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/mobileiron
- canonical/mobileiron cloud
- version/mobileiron cloud/10.6
- canonical/mobileiron core
- version/mobileiron core/10.6
- canonical/ivanti mobileiron multiple products
- version/ivanti mobileiron multiple products/10.6
- canonical/mobileiron reporting database
- version/mobileiron reporting database/10.6
- canonical/mobileiron sentry
- version/mobileiron sentry/10.6