{"id":"CVE-2020-15506","aliases":["EUVD-2020-7498","GHSA-79pv-hv79-f9hf"],"status":"published","title":"MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10...","description":"An authentication bypass vulnerability in MobileIron Core \u0026 Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02816,"percentile":0.86724,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2020-07-07T01:43:13Z","modified":"2026-06-17T02:56:45Z","products":[{"vendor":"mobileiron","product":"cloud"},{"vendor":"mobileiron","product":"core"},{"vendor":"mobileiron","product":"enterprise_connector"},{"vendor":"mobileiron","product":"reporting_database"},{"vendor":"mobileiron","product":"sentry"}],"references":[{"url":"https://www.mobileiron.com/en/blog/mobileiron-security-updates-available","tags":["x_refsource_MISC","x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15506"},{"url":"https://github.com/advisories/GHSA-79pv-hv79-f9hf"}],"sources":{"cve":[{"id":"CVE-2020-15506","description":"An authentication bypass vulnerability in MobileIron Core \u0026 Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors.","status":"published","published":"2020-07-07T01:43:13Z","modified":"2024-08-04T13:15:20.863Z","updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7498","description":"An authentication bypass vulnerability in MobileIron Core \u0026 Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors.","status":"published","published":"2020-07-07T01:43:13Z","modified":"2024-08-04T13:15:20Z","updated_at":"2026-11-03T03:07:31.508652Z"}],"ghsa":[{"id":"GHSA-79pv-hv79-f9hf","title":"MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10...","description":"MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10.5.2.x before 10.5.2.1, and 10.6.x before 10.6.0.1 allow remote attackers to bypass authentication mechanisms via unspecified vectors.","status":"published","published":"2022-05-24T17:22:30Z","modified":"2023-01-29T05:03:18Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:45:17.6265Z"}],"nvd":[{"id":"CVE-2020-15506","description":"An authentication bypass vulnerability in MobileIron Core \u0026 Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors.","status":"published","published":"2020-07-07T02:15:10.677Z","modified":"2026-06-17T02:56:45.687Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:06:09.126752Z"}]}}