CVE-2014-1910

Currently unrated

Key Information:

Vendor
Citrix
Status
Sharefile Mobile For Tablets
Sharefile Mobile
Vendor
CVE Published:
21 February 2014

Summary

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References

http://secunia.com/advisories/57020
third-party-advisoryx_refsource_SECUNIA
http://support.citrix.com/article/CTX140303
x_refsource_CONFIRM
http://www.securitytracker.com/id/1029791
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.