CVE-2020-8210

EPSS 1.54%
Veröffentlicht 17.08.2020 16:15:13
Zuletzt bearbeitet 21.11.2024 05:38:30
Erkennungen
Login

Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credentials of a service account.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 21 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Citrix ≫ Xenmobile Server Version <= 10.8.0

Citrix ≫ Xenmobile Server Version 10.9.0 Update -

Citrix ≫ Xenmobile Server Version 10.9.0 Update rolling_patch1

Citrix ≫ Xenmobile Server Version 10.9.0 Update rolling_patch2

Citrix ≫ Xenmobile Server Version 10.9.0 Update rolling_patch3

Citrix ≫ Xenmobile Server Version 10.9.0 Update rolling_patch4

Citrix ≫ Xenmobile Server Version 10.10.0 Update -

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch1

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch2

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch3

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch4

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch5

Citrix ≫ Xenmobile Server Version 10.11.0 Update -

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch1

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch2

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch3

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch4

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch5

Citrix ≫ Xenmobile Server Version 10.12.0 Update -

Citrix ≫ Xenmobile Server Version 10.12.0 Update rolling_patch1

Citrix ≫ Xenmobile Server Version 10.12.0 Update rolling_patch2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.54%	0.717

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://support.citrix.com/article/CTX277457

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-8210

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-8210

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-8210

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-8210