CVE-2014-1910

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-1910

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-1910

CVE-2014-1910 affects Citrix ShareFile Mobile for Android and ShareFile Mobile for Tablets prior to version 2.4.4. The vulnerability is due to improper SSL certificate validation (X.509) which can allow MITM attackers to spoof servers and exfiltrate data. Citrix advisories (CTX140303) and NVD/NVD...

CVE-2014-1910: Undefined Security Weakness

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Citrix XenMobile Device Manager服务器信息泄露漏洞(CVE-2014-1663)

BUGTRAQ ID: 65348 CVECAN ID: CVE-2014-1663 Citrix XenMobile设备管理器是企业级移动设备管理解决方案。 Citrix XenMobile设备管理器8.0.1, 8.5, 8.6版本存在不明细节信息泄露漏洞，成功利用后可使远程攻击者获取敏感信息。 0 Citrix XenMobile Device Manager 8.x Citrix XenMobile Device Manager 7.x Citrix XenMobile Device Manager 6.x 厂商补丁： Citrix ------...

CVE-2014-1663

Unspecified vulnerability in Citrix XenMobile Device Manager server formerly Zenprise Device Manager server 8.5, 8.6, and MDM 8.0.1 allows remote attackers to obtain sensitive information via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Citrix XenMobile Device Manager server formerly Zenprise Device Manager server 8.5, 8.6, and MDM 8.0.1 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2014-1663

CVE-2014-1663 affects Citrix XenMobile Device Manager server (formerly Zenprise Device Manager) versions 8.5, 8.6 and MDM 8.0.1. The connected Seebug/SSV entries describe an unspecified information-disclosure vulnerability that allows remote attackers to obtain sensitive information through unkno...

CVE-2014-1663

Unspecified vulnerability in Citrix XenMobile Device Manager server formerly Zenprise Device Manager server 8.5, 8.6, and MDM 8.0.1 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2014-1663: Undefined Security Weakness

Unspecified vulnerability in Citrix XenMobile Device Manager server formerly Zenprise Device Manager server 8.5, 8.6, and MDM 8.0.1 allows remote attackers to obtain sensitive information via unknown vectors...

PT-2014-4282

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Device Manager server versions 8.0.1, 8.5, 8.6 Description The issue allows remote attackers to obtain sensitive information via unknown vectors. Recommendations For version 8.0.1, update to a version that contains a fix for...

Citrix GoToMeeting information leakage

Information leakage via logs...

[CVE-2014-1664] GoToMeeting Information Disclosure via Logging Output (Android)

ADVISORY INFORMATION ======================== Title: GoToMeeting Information Disclosure via Logging Output Android CVE: CVE-2014-1664 CVE Information: ASSIGNED Date published: PUBLIC Date of last update: 01/23/2014 Vendor Contacted: Citrix Release mode: Coordinated Release 2. VULNERABILITY...

CVE-2014-1664

The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens via an application that reads the system log file...

Authentication flaw

The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens via an application that reads the system log file...

CVE-2014-1664

The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which allows attackers to obtain user IDs, meeting details, and authentication tokens via an application that reads the system log file...

CVE-2014-1664

The CVE-2014-1664 entry concerns Citrix GoToMeeting for Android version 5.0.799.1238, which logs HTTP requests containing sensitive data. The underlying issue is information disclosure via logs read by other Android apps with system log access, enabling leakage of user IDs, meeting details, and a...

PT-2014-4283

Name of the Vulnerable Software and Affected Versions Citrix GoToMeeting version 5.0.799.1238 Description The issue concerns the logging of HTTP requests containing sensitive information by the application. This allows attackers to obtain user IDs, meeting details, and authentication tokens via a...

GoToMeeting Information Disclosure

ADVISORY INFORMATION ======================== Title: GoToMeeting Information Disclosure via Logging Output Android CVE: CVE-2014-1664 CVE Information: ASSIGNED Date published: PUBLIC Date of last update: 01/23/2014 Vendor Contacted: Citrix Release mode: Coordinated Release 2. VULNERABILITY...