« Volver al listado

CVE-2020-15506

Estado: ModificadaCrítica (9.8)—

An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

Mobileiron — CloudMobileiron — CoreMobileiron — Enterprise ConnectorMobileiron — Reporting DatabaseMobileiron — Sentry

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-15506",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-07-07T02:15:10.677",
  "references": [
    {
      "url": "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de omisión de autentificación en MobileIron Core y Connector versiones 10.3.0.3 y anteriores, versiones 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 y versión 10.6.0.0 permite a atacantes remotos omitir los mecanismos de autenticación por medio de vectores no especificados"
    }
  ],
  "lastModified": "2026-06-17T02:56:45.687",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mobileiron:cloud:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C4F0B0B-388C-4B6A-B233-77269AFE887E",
              "versionEndIncluding": "10.6"
            },
            {
              "criteria": "cpe:2.3:a:mobileiron:core:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3ACD8393-2E8F-4790-B142-1C41D2EA0956",
              "versionEndIncluding": "10.6"
            },
            {
              "criteria": "cpe:2.3:a:mobileiron:enterprise_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F1D3A8A-BCA4-4DF8-A126-F9E10B194ED0",
              "versionEndIncluding": "10.6"
            },
            {
              "criteria": "cpe:2.3:a:mobileiron:reporting_database:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B823AB8-E08B-4A3B-BABF-3E9FB7C18B99",
              "versionEndIncluding": "10.6"
            },
            {
              "criteria": "cpe:2.3:a:mobileiron:sentry:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96937DB3-B17C-4718-B2D9-6219B5B10676",
              "versionEndIncluding": "10.6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}