PatchTheCVEenterprise connector vulnerabilities and fixes
Recent CVEs affecting enterprise connector, with upgrade or downgrade steps. 3 tracked.
Also searched as: enterpriseconnector.
enterprise connector has 3 tracked vulnerabilities, 2 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 3. Most recent: 2020-07-07. Highest priority: CVE-2020-15505 (score 97/100).
- CVE-2020-15507 HIGH 7.5 UPGRADE UPGRADE An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1,
- CVE-2020-15506 CRITICAL 9.8 UPGRADE UPGRADE An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0,
- CVE-2020-15505 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
FAQ
How do I fix enterprise connector vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is enterprise connector being exploited right now?
Yes: 1 enterprise connector CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which enterprise connector CVE should I patch first?
CVE-2020-15505 currently ranks highest (97/100): Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability.