Design/Logic Flaw

2014-10-3114:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached application data, which allows context-dependent attackers to obtain sensitive information by reading the cache.

CPENameOperatorVersion
xenmobileeq8.5
xenmobileeq8.7
xenmobilele9.0.3
xenmobileeq9.0.2
xenmobileeq8.6
xenmobileeq9.0

Name	Operator	Version
xenmobile	eq	8.5
xenmobile	eq	8.7
xenmobile	le	9.0.3
xenmobile	eq	9.0.2
xenmobile	eq	8.6
xenmobile	eq	9.0

References

support.citrix.com/article/CTX200260

www.securityfocus.com/bid/70799

www.securitytracker.com/id/1031164

exchange.xforce.ibmcloud.com/vulnerabilities/98337