Citrix XenMobile Server CVE-2017-9231 XML External Entity Information Disclosure Vulnerability
BID:98995
Info
Citrix XenMobile Server CVE-2017-9231 XML External Entity Information Disclosure Vulnerability
| Bugtraq ID: | 98995 |
| Class: | Design Error |
| CVE: |
CVE-2017-9231 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 07 2017 12:00AM |
| Updated: | Jun 07 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Citrix XenMobile Server 10.0 Citrix XenMobile Server 9.0 Citrix XenMobile Server 10.5 Citrix XenMobile Server 10.4 Citrix XenMobile Server 10.3.6 Citrix XenMobile Server 10.3.5 Citrix XenMobile Server 10.3 Citrix XenMobile Server 10.1 Citrix XenMobile App Controller 9.0 |
| Not Vulnerable: |
Citrix XenMobile Server 10.5 RP3 |
Discussion
Citrix XenMobile Server CVE-2017-9231 XML External Entity Information Disclosure Vulnerability
Citrix XenMobile Server is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to gain unauthorized access, and obtain potentially sensitive information. This may lead to further attacks.
Citrix XenMobile Server versions 10.x and 9.x are vulnerable.
Citrix XenMobile Server is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to gain unauthorized access, and obtain potentially sensitive information. This may lead to further attacks.
Citrix XenMobile Server versions 10.x and 9.x are vulnerable.
Solution / Fix
Citrix XenMobile Server CVE-2017-9231 XML External Entity Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.