CVE-2020-8209

🗓️ 17 Aug 2020 15:37:15Reported by hackeroneType

Improper access control in Citrix XenMobile Server

Reporter	Title	Published	Views	Family All 18
GithubExploit	Exploit for Path Traversal in Citrix Xenmobile_Server	17 Nov 202007:20	–	githubexploit
Information Security Automation	Security News: Exchange ProxyShell, Zoom RCE, Citrix Canceled PT Acknowledgments, Cisco No Patch Router RCEs	31 Aug 202123:16	–	avleonov
BDU FSTEC	The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, arises from incorrect restrictions on the path to the restricted catalog. This allows unauthorized users to gain unauthorized access to protected information.	1 Apr 202100:00	–	bdu_fstec
Circl	CVE-2020-8209	12 Aug 202004:42	–	circl
CNVD	Citrix Systems XenMobile Server Path Traversal Vulnerability	14 Aug 202000:00	–	cnvd
Check Point Advisories	Citrix XenMobile Server Directory Traversal (CVE-2020-8209)	23 Nov 202000:00	–	checkpoint_advisories
Citrix	Citrix Endpoint Management (CEM) Security Update	9 Nov 202000:00	–	citrix
CVE	CVE-2020-8209	17 Aug 202015:37	–	cve
Gitee	Exploit for Path Traversal in Citrix Xenmobile_Server	24 Jan 202110:44	–	gitee
Dsquare	Citrix XenMobile Server File Disclosure	18 Nov 202000:00	–	dsquare

[
  {
    "product": "Citrix XenMobile Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Citrix XenMobile Server 10.12 RP2, Citrix XenMobile Server 10.11 RP4, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX277457

17 Aug 2020 15:37Current

7.6High risk

Vulners AI Score7.6

EPSS0.48656

CWE-22