MobileIron Log4Shell RCE

Description

Due to vulnerabilities in Log4j library used by MobileIron, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.

Remediation

Upgrade to the latest version of MobileIron

References

Security Bulletin:CVE-2021-44228: MobileIron Remote code injection in Log4j

Related Vulnerabilities

WordPress Plugin WP-Filebase Download Manager Remote Code Execution (0.3.0.03)

WordPress Plugin CiviCRM Remote Code Execution (5.24.2)

IBM WebSphere RCE Java Deserialization Vulnerability

Array

WordPress 2.0.2 Username Remote PHP Code Injection Vulnerability (0.6.2 - 2.0.2)

Severity

High

Classification

CVE-2021-44228 CWE-78 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A