CVE-2021-3198: Ivanti MobileIron

High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days.

By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

Affected products

• Ivanti MobileIron: up to and including 10.7.0.1-9; from 11.0.0.0, before 11.1.0.0 (fixed in 11.1.0.0)

Published 2021-07-22. Last modified 2026-06-17.