CVE-2020-15507

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.mobileiron.com/en/blog/mobileiron-security-updates-availableVendor Advisory
https://www.mobileiron.com/en/blog/mobileiron-security-updates-availableVendor Advisory
https://www.mobileiron.com/en/blog/mobileiron-security-updates-availableVendor Advisory
https://www.mobileiron.com/en/blog/mobileiron-security-updates-availableVendor Advisory
https://www.mobileiron.com/en/blog/mobileiron-security-updates-availableVendor Advisory
https://www.mobileiron.com/en/blog/mobileiron-security-updates-availableVendor Advisory
https://www.mobileiron.com/en/blog/mobileiron-security-updates-availableVendor Advisory
https://www.mobileiron.com/en/blog/mobileiron-security-updates-availableVendor Advisory

Timeline

Published: Jul 7, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-155096.5Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android (as used by nRF Connect and other applicat CVE-2020-15517.8An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an a CVE-2020-155115.3HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when disabled, bypassing CVE-2020-155135.3The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control.CVE-2020-155145.4The jh_captcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS.CVE-2020-155158.8The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution.CVE-2020-155165.4The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.CVE-2020-155175.4The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS.CVE-2020-155188.8VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivil CVE-2020-15528.0An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who succ CVE-2020-155216.1Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) .CVE-2020-155225.9Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue wi