Critical Flaws Affect Citrix Endpoint Management (XenMobile Servers)

Citrix today released patches for multiple new security vulnerabilities affecting its Citrix Endpoint Management CEM, also known as XenMobile, a product made for enterprises to help companies manage and secure their employees' mobile devices remotely. Citrix Endpoint Management offers businesses...

PT-2020-3976 · Microsoft · Windows Mdm Diagnostics +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile Device Management MDM Diagnostics affected versions not specified Description: An information disclosure issue exists due to improper handling of junctions by Windows MDM Diagnostics, allowing an attacker to bypass access...

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows attackers to escalate their privileges.

The vulnerability of the diagnostic tool for Mobile Device Management MDM applications that diagnose Windows operating systems is related to improper handling of files. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows attackers to escalate their privileges.

The vulnerability of the diagnostic tool for Mobile Device Management applications exists due to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the diagnostic tool for Mobile Device Management MDM applications that diagnose Windows operating systems is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a...

Microsoft Windows Mobile Device Management Diagnostics elevation of privilege vulnerability (CNVD-2020-40879)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Mobile Device Manageme...

Microsoft Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows Mobile Device Manageme...

Microsoft Windows Mobile Device Management Diagnostics elevation of privilege vulnerability (CNVD-2020-52925)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Mobile Device Manageme...

CVE-2020-1405

An elevation of privilege vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1372...

CVE-2020-1330

An information disclosure vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'...

CVE-2020-1330

An information disclosure vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles objects in memory, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1405...

CVE-2020-1405

An elevation of privilege vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1372...

CVE-2020-1372

An elevation of privilege vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles objects in memory, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1405...

CVE-2020-1372

CVE-2020-1372 refers to an Elevation of Privilege in Windows Mobile Device Management (MDM) Diagnostics. CNVD entries state the root cause as improper handling of objects in memory, exploitable by running a specially crafted application to bypass access restrictions (and, in one CNVD entry, delet...

CVE-2020-1330

An information disclosure vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'...

CVE-2020-1330

CVE-2020-1330 is an information-disclosure vulnerability in Windows Mobile Device Management Diagnostics. The issue arises when MDM Diagnostics improperly handles junctions, enabling an attacker who can log on to read files via a specially crafted application. Microsoft’s advisory states that the...

Most companies are ignoring your most vulnerable endpoint…and it’s not the laptop

It’s an open secret that mobile devices are your weakest security link. We pretend not to know how vulnerable they are to attack, nor how exposed they leave your business. A 2019 study found that most companies allow mobile devices to access between 1/3 and 3/4 of their most business-critical...

Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions. An attacker who successfully exploited this vulnerability could bypass access restrictions to delete files. To exploit this vulnerability, an attacker would first hav...

Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles objects in memory. An attacker who successfully exploited this vulnerability could bypass access restrictions to delete files. To exploit this vulnerability, an attacker would...