CVE-2020-8209CWE-22

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and…

published August 17, 2020

CVSS

—

EPSS

44%

Percentile

98.8

In the wild

Unconfirmed

What it is

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.43933 · 98.8th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2020-08-17T15:37Z

EPSS history

Timeline

17 AUG 15:37Z
Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and…
cvelistv5