CVE-2018-18571

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management (MAM) enrolled device.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2019-06-05

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Xenmobile Server (Citrix)

References

• http://www.securityfocus.com/bid/108081
• https://support.citrix.com/article/CTX247736