CVE-2021-3198

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Jul 22, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-319808.1Microsoft Intune Management Extension Remote Code Execution Vulnerability CVE-2021-319828.8Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability CVE-2021-319837.8Paint 3D Remote Code Execution Vulnerability CVE-2021-319847.6Power BI Remote Code Execution Vulnerability CVE-2021-319857.8Microsoft Defender Remote Code Execution Vulnerability CVE-2021-319866.8User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashe CVE-2021-319877.5A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recip CVE-2021-319888.8A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and CVE-2021-319895.3A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump CVE-2021-31999.8Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. CVE-2021-319967.5An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge().CVE-2021-319977.8A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate