PT-2014-8559 · Apple+1 · Ios+1

Published 2014-10-31 · Updated 2017-09-08 · CVE-2014-8495

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix XenMobile MDX Toolkit versions prior to 9.0.4

Description The issue concerns the improper encryption of cached application data when the Citrix XenMobile MDX Toolkit is used to wrap iOS 8 applications. This allows attackers to obtain sensitive information by reading the cache.

Recommendations For versions prior to 9.0.4, update to version 9.0.4 or later to properly encrypt cached application data and prevent unauthorized access.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2014-8495

Affected Products

Citrix Xenmobile Mdx Toolkit

Ios

References · 5

• http://support.citrix.com/article/CTX200260 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8495 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98337 · Note
• http://securitytracker.com/id/1031164 · Note
• http://securityfocus.com/bid/70799 · Note