PT-2020-20061 · Citrix · Citrix Xenmobile Server

Published 2020-09-18 · Updated 2020-10-01 · CVE-2020-8253

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions prior to 10.9 RP5 Citrix XenMobile Server 10.10 before RP6 Citrix XenMobile Server 10.11 before RP4 Citrix XenMobile Server 10.12 before RP2

Description The issue is related to improper authentication, which allows unauthorized access to sensitive files.

Recommendations For Citrix XenMobile Server versions prior to 10.9 RP5, update to version 10.9 RP5 or later. For Citrix XenMobile Server 10.10 before RP6, update to RP6 or later. For Citrix XenMobile Server 10.11 before RP4, update to RP4 or later. For Citrix XenMobile Server 10.12 before RP2, update to RP2 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-8253

Affected Products

Citrix Xenmobile Server

References · 3

• https://support.citrix.com/article/CTX277457 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8253 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8253 · Vendor Advisory