CVE-2014-8495
Severity CVSS v4.0:
Pending analysis
Type:
CWE-310
Cryptographic Issues
Publication date:
31/10/2014
Last modified:
12/04/2025
Description
Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached application data, which allows context-dependent attackers to obtain sensitive information by reading the cache.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:citrix:xenmobile:*:*:*:*:*:*:*:* | 9.0.3 (including) | |
cpe:2.3:a:citrix:xenmobile:8.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:citrix:xenmobile:8.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:citrix:xenmobile:8.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:citrix:xenmobile:9.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:citrix:xenmobile:9.0.2:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://support.citrix.com/article/CTX200260
- http://www.securityfocus.com/bid/70799
- http://www.securitytracker.com/id/1031164
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98337
- http://support.citrix.com/article/CTX200260
- http://www.securityfocus.com/bid/70799
- http://www.securitytracker.com/id/1031164
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98337