Description

Due to vulnerabilities in Log4j library used by MobileIron, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.

Remediation

Upgrade to the latest version of MobileIron

References

Security Bulletin:CVE-2021-44228: MobileIron Remote code injection in Log4j

Related Vulnerabilities

WordPress Plugin WP Super Cache PHP Code Injection (1.2)

MoinMoin CVE-2012-6081 multiple arbitrary code execution vulnerabilities

Symfony weak application secret

Liferay TunnelServlet Deserialization Remote Code Execution

Xdebug remote code execution via xdebug.remote_connect_back

Severity

High

Classification

CVE-2021-44228 CWE-78 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A

Tags

Acumonitor Code Execution