NetSight
medium5.0

CVE-2014-8495

Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached application data, which allows context-depend…

Impact

Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap iOS 8 applications, does not properly encrypt cached application data, which allows context-dependent attackers to obtain sensitive information by reading the cache.

Affected products

VendorProductAffected versions
CitrixXenmobile
through 9.0.3
Versions 8.5, 8.6, 8.7, 9.0, 9.0.2

Weakness classification

References