PT-2014-8559 · Apple+1 · Ios+1

Publicado 2014-10-31 · Atualizado 2017-09-08 · CVE-2014-8495

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix XenMobile MDX Toolkit versions prior to 9.0.4

Description The issue concerns the improper encryption of cached application data when the Citrix XenMobile MDX Toolkit is used to wrap iOS 8 applications. This allows attackers to obtain sensitive information by reading the cache.

Recommendations For versions prior to 9.0.4, update to version 9.0.4 or later to properly encrypt cached application data and prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2014-8495

Produtos afetados

Citrix Xenmobile Mdx Toolkit

Ios

Referências · 5

• http://support.citrix.com/article/CTX200260 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98337 · Nota
• http://securitytracker.com/id/1031164 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8495 · Nota de Segurança
• http://securityfocus.com/bid/70799 · Nota