CVE-2018-18571

2019-06-0514:53:57

mitre

www.cve.org

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management (MAM) enrolled device.

References

www.securityfocus.com/bid/108081

support.citrix.com/article/CTX247736