According to its self-reported version number, the installation of MobileIron Core on the remote host is affected   by multiple vulnerabilities: 

    - A remote command execution vulnerability exists in MobileIron Core and Connector versions 10.6       and earlier, and Sentry versions 9.8 and earlier.  An unauthenticated, remote attacker can       exploit this to bypass authentication and execute arbitrary commands as root.  (CVE-2020-15505)

    - An arbitrary file read vulnerability exists in MobileIron Core and Connector versions 10.6       and earlier. An unauthenticated, remote attacker can exploit this to read arbitrary files       and disclose sensitive information. (CVE-2020-15507)

    - An authentication bypass vulnerability exists in MobileIron Core and Connector versions 10.6       and earlier. An unauthenticated, remote attacker can exploit this to bypass authentication       and execute arbitrary actions with escalated privileges. (CVE-2020-15506)    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported   version

Detections

Analytics

MobileIron Core 10.3.0.x < 10.3.0.4-19 / 10.4.0.x < 10.4.0.4-22 / 10.5.1.1 < 10.5.1.1-22 / 10.5.2.1 < 10.5.2.1-14 / 10.6.0.1 < 10.6.0.1-19 / 10.7.0.0 < 10.7.0.0-28

critical Nessus Plugin ID 141366