CVE-2020-8275CWE-284

Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored…

published January 6, 2021

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01966 · 80.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-01-06T20:58Z
EPSS history
Timeline
  • 06 JAN 20:58Z
    Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored…
    cvelistv5