{"id":"CVE-2020-15507","aliases":["EUVD-2020-7499","GHSA-82mj-gp48-7vv2"],"status":"published","title":"MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10...","description":"An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02244,"percentile":0.83093,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2020-07-07T01:42:44Z","modified":"2026-06-17T02:56:45Z","products":[{"vendor":"mobileiron","product":"cloud"},{"vendor":"mobileiron","product":"core"},{"vendor":"mobileiron","product":"enterprise_connector"},{"vendor":"mobileiron","product":"reporting_database"},{"vendor":"mobileiron","product":"sentry"}],"references":[{"url":"https://www.mobileiron.com/en/blog/mobileiron-security-updates-available","tags":["x_refsource_MISC","x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15507"},{"url":"https://github.com/advisories/GHSA-82mj-gp48-7vv2"}],"sources":{"cve":[{"id":"CVE-2020-15507","description":"An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors.","status":"published","published":"2020-07-07T01:42:44Z","modified":"2024-08-04T13:15:20.702Z","updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7499","description":"An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors.","status":"published","published":"2020-07-07T01:42:44Z","modified":"2024-08-04T13:15:20Z","updated_at":"2026-11-03T03:07:31.508652Z"}],"ghsa":[{"id":"GHSA-82mj-gp48-7vv2","title":"MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10...","description":"MobileIron Core and Connector before 10.3.0.4, 10.4.x before 10.4.0.4, 10.5.x before 10.5.1.1, 10.5.2.x before 10.5.2.1, and 10.6.x before 10.6.0.1 allow remote attackers to read files on the system via unspecified vectors.","status":"published","published":"2022-05-24T17:22:31Z","modified":"2023-01-29T05:03:06Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:45:14.655741Z"}],"nvd":[{"id":"CVE-2020-15507","description":"An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors.","status":"published","published":"2020-07-07T02:15:10.753Z","modified":"2026-06-17T02:56:45.803Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:09.126752Z"}]}}