Description
MobileIron Sentry和MobileIron Core都是美国思可信（MobileIron）公司的产品。Sentry是一款智能网关产品。MobileIron Core是一款MobileIron平台的管理控制台组件。该产品支持为设备、应用程序和内容定义安全和管理策略。 MobileIron Core 10.6及之前版本、Connector 10.6及之前版本和Sentry 9.8及之前版本中存在安全漏洞。远程攻击者可利用该漏洞执行任意代码。
MobileIron <= v10.6 LogService 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/vuldb/detail/fd7bee84-0d14-4166-994c-cb9f20a20738
https://avd.aliyun.com/detail?id=AVD-2020-15505
https://www.cnvd.org.cn/flaw/show/CNVD-2021-21924
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/MobileIron/%EF%BC%88CVE-2020-15505%EF%BC%89MobileIron%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.acunetix.com/vulnerabilities/web/mobileiron-remote-code-execution-via-logservice/
https://www.ivanti.com/blog/mobileiron-security-updates-available
https://www.sentinelone.com/vulnerability-database/cve-2020-15505/
https://www.connectwise.com/blog/cve-spotlight-mobileiron-rce-cve-2020-15505
https://www.ncsc.gov.uk/news/alert-multiple-actors-attempt-exploit-mobileiron-vulnerability