Vulnerabilities fixed in Citrix Secure Mail

Citrix has fixed vulnerabilities in Citrix Secure Mail. A malicious party can use a rogue app to gain access to the email data and, to a lesser extent, the calendar data stored in the victim's Citrix Secure Mail. The vulnerability is located in Citrix Secure Mail for Android. Citrix Secure Mail f...

Citrix Secure Mail for Android Security Update

Description of Problem Vulnerabilities have been discovered in CitrixSecure Mailfor Androidthatcould allowunauthorisedaccessto datawithinCitrix Secure Mail. These vulnerabilities have the following identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions ---|---|---|--- CVE-2020-8274|...

Secure Mail Test Tool

Citrix Endpoint Management, using technology formerly called XenMobile Introduction Secure Mail Test Toolis designed to help troubleshoot the ActiveSync servers for their readiness to be deployed with XenMobile environment. This tool can be used specifically for ensuring the proper functioning of...

Secure Mail TLS Version 1.0 and 1.1 Deprecation

To improve the security of connections to Citrix Listener Service used for Secure Mail notifications, Citrix will block any communication over Transport Layer Security TLS 1.0 and 1.1 as of August 31st, 2020. Affected Component: Push Notifications for Secure Mail...

MDX managed apps cannot open links properly so that apps which are not managed launch automatically

Problem description: MDX app policies are configured but the app that is not managed does not launch automatically as expected. Example use case: iOS has the Booking.com app installed from the Public App Store. The device also has Secure Web and Secure Mail installed. The Secure apps are managed ...

Secure Mail on iOS opens for about 5 seconds then crashes

When Secure Mail opens all looks ok, after about 5 seconds the app crashes. Just for one user regardless of iOS device...

UBUNTU-CVE-2019-11755

A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the signer might have had no access to the contents of the encrypted message, and might have stripped a different signature from the encrypted...

UBUNTU-CVE-2019-11739

Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird 68.1 and Thunderbird 60.9...

Unable to attach from Citrix Files/Quick Edit into Secure Mail

Facing an issue where you open a number of different file types in Citrix Files/Quick Edit and select "Open In" and select "Copy to Secure Mail" and you receive a "Unable to attach file" error in Secure Mail...

Cannot connect to company network" when accessing O365 accounts

Citrix documentation indicates Secure Mail is supposed to support an MS hosted O365 back end account but user is unable to get a known good O365 account to function with Secure Mail. That same account works fine either via the web or via the Mobile Outlook App but I cannot get it to connect when...

ERROR: "This app has been disabled because entitlement to the app was not found if you have entitlement to this app, you may delete and re-install it"

Secure Mail fails to be launched on Huawei Phone with error: "This app has been disabled because entitlement to the app was not found if you have entitlement to this app, you may delete and re-install it"...

DEBIAN-CVE-2017-17689

The S/MIME specification allows a Cipher Block Chaining CBC malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL...

FAQ: Citrix Secure Mail APNS for IT Admins

This article provides answers to frequently asked questions onCitrix Secure Mail APNS forIT Admins.For more information on Push Notifications for Secure Mail, refer to Citrix Documentation - Rich Push Notifications for Secure Mail for iOS. General Overview Q1: Why does Secure Mail for iOS require...

FAQ: Badge Behavior and Notifications Behavior for End Users

This article provides frequently asked questions and answers for Badge behavior and Notifications behavior. Badge Behaviour for End Users Q: What does the badge count represent? A : The badge count represents the total number of unread count of mails for your entire inbox folder. Q: Do I still ha...

Apple macOS High Sierra Mail Man-in-the-Middle Attack Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Mail is one of the email components. A security vulnerability exists in the handling of S/MIME HTML email messages in the Mail component in Apple macOS High Sierra versions prior to 10.13.4. An...

Secure Mail - Use Safari as the Default Browser - No Browser Installed

From Secure Mail on the iOS devices you could receive this error message "No Browser Installed. Please install Secure Web or another web browser to open this link" when try to open a hyperlink or a url from an email message. The iOS device has the standard Safari browser installed...

How to attach files in Secure Mail keeping the policy restricted

In Secure Mail/WorxMail versions 10.3.5 and later, Android users can't attach images directly from the Gallery app when the Inbound document exchange Open-in policy is set to Restricted. If you want to keep this policy set to Restricted but still allow users to add photos from the Gallery, follow...

"Incorrect username or password" on Secure Mail after Exchange Server upgrade to 2016 CU8

Since the exchange server was upgraded from Exchange 2016 to Exchange server 2016 CU8, users are facing 2 issues as below. 1. Existing users are unable to sync e-mail. 2. New users are unable to logon...

The vulnerability of Kaspersky Secure Mail Gateway’s email protection mechanism, related to insecure privilege management, allows unauthorized access to root rights.

The vulnerability of Kaspersky Secure Mail Gateway lies in the insecure management of privileges. Exploiting this vulnerability could allow a local attacker to gain root access to the targeted system using a specially crafted script...

The vulnerability in the web console of the Kaspersky Secure Mail Gateway protection tool allows for XSS attacks to be carried out.

The vulnerability of the Kaspersky Secure Mail Gateway web console protection tool is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root access to the attacked system using a...