PT-2022-17697 · Citrix · Citrix Xenmobile Server

Shengfu Chang · Published 2022-04-12 · Updated 2023-08-08 · CVE-2022-26151

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.12 through RP11 Citrix XenMobile Server versions 10.13 through RP7 Citrix XenMobile Server versions 10.14 through RP4

Description The issue allows Command Injection.

Recommendations For versions 10.12 through RP11, update to a version later than RP11 to resolve the issue. For versions 10.13 through RP7, update to a version later than RP7 to resolve the issue. For versions 10.14 through RP4, update to a version later than RP4 to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2022-26151

Affected Products

Citrix Xenmobile Server

References · 7

• https://osv.dev/vulnerability/CVE-2022-26151 · Vendor Advisory
• https://support.citrix.com/article/CTX370551 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26151 · Security Note
• https://support.citrix.com/search · Vendor Advisory
• https://t.me/cvenotify/28806 · Telegram Post
• https://t.me/cvenotify/39015 · Telegram Post
• https://chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe · Note