CVE-2020-8212

EPSS 1.64%
Veröffentlicht 17.08.2020 16:15:13
Zuletzt bearbeitet 21.11.2024 05:38:30
Erkennungen
Login

Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 16 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Citrix ≫ Xenmobile Server Version <= 10.9.0

Citrix ≫ Xenmobile Server Version 10.10.0 Update -

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch1

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch2

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch3

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch4

Citrix ≫ Xenmobile Server Version 10.10.0 Update rolling_patch5

Citrix ≫ Xenmobile Server Version 10.11.0 Update -

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch1

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch2

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch3

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch4

Citrix ≫ Xenmobile Server Version 10.11.0 Update rolling_patch5

Citrix ≫ Xenmobile Server Version 10.12.0 Update -

Citrix ≫ Xenmobile Server Version 10.12.0 Update rolling_patch1

Citrix ≫ Xenmobile Server Version 10.12.0 Update rolling_patch2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.64%	0.733

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-749 Exposed Dangerous Method or Function

The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://support.citrix.com/article/CTX277457

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-8212

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-8212

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-8212

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-8212