Description

Due to vulnerabilities in Log4j library used by MobileIron, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.

Remediation

Upgrade to the latest version of MobileIron

References

Security Bulletin:CVE-2021-44228: MobileIron Remote code injection in Log4j

Related Vulnerabilities

PHP CGI Argument Injection (CVE-2024-4577)

OpenX arbitrary file upload

WordPress Plugin Yoast SEO Possible Remote Code Execution (9.1.0)

WordPress Plugin Catch Themes Demo Import Remote Code Execution (2.1)

Rejetto HTTP File Server SSTI RCE (CVE-2024-23692)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A

Tags

Acumonitor Code Execution CWE-78 CVE-2021-44228