CVE-2020-8275

Citrix Secure Mail for Android prior to 20.11.0 is vulnerable to improper access control (CVE-2020-8275): an unauthenticated party could read limited calendar data stored in Secure Mail if a malicious app is installed or code is executed on the device. Affected component is the Android Secure Mai...

CVE-2020-8274

Citrix Secure Mail for Android is affected by CVE-2020-8274 (Code Injection) due to Improper Control of Generation of Code, allowing an unauthenticated app or threat actor with a device-execution capability to read data stored within Secure Mail. Affected product: Citrix Secure Mail for Android b...