Citrix fixes critical bugs allowing takeover of XenMobile Servers [Citrix Endpoint Management (CEM)]

guest · Aug 11, 2020

Citrix fixes critical bugs allowing takeover of XenMobile Servers
August 11, 2020
https://www.bleepingcomputer.com/ne...-bugs-allowing-takeover-of-xenmobile-servers/

Citrix today fixed 5 vulnerabilities impacting multiple versions of Citrix Endpoint Management (CEM) on-premise instances, also known as XenMobile Server.

On-premise Citrix XenMobile provides a unified interface to manage employees' desktops, notebooks, and mobile devices (tablets and smartphones) through a single platform.
Customers urged to update vulnerable servers
The company strongly recommends customers to immediately update vulnerable XenMobile Server deployments since attackers will most likely immediately start scanning for vulnerable servers and attempt to exploit them.

"We recommend these upgrades be made immediately," Citrix says. "While there are no known exploits as of this writing, we do anticipate malicious actors will move quickly to exploit."
Click to expand...

XenMobile Server versions exposed to attacks
Two of these vulnerabilities are rated as critical severity and, collectively, they could allow unauthenticated attackers to takeover XenMobile Servers after gaining admin control following successful exploitation.

"The latest rolling patches that need to be applied for versions 10.9, 10.10, 10.11 and 10.12 are available immediately," Citrix explains.
Click to expand...

guest · Aug 11, 2020

Citrix fixes XenMobile vulnerability found by Positive Technologies
August 11, 2020
https://www.ptsecurity.com/ww-en/ab...vulnerability-found-by-positive-technologies/

Positive Technologies expert Andrey Medov has discovered a vulnerability in Citrix XenMobile enterprise mobility management solution. When following a specially crafted URL, attackers could read arbitrary files outside the web server root directory, including configuration files and encryption keys for sensitive data. To exploit the vulnerability, no authorization was needed.

The vulnerability discovered in the Citrix XenMobile Server component was assigned the identifier CVE-2020-8209. The flaw is related to Path Traversal and is a result of insufficient input validation.

"[...] However, taking into account that the database is stored inside the corporate perimeter and cannot be accessed from the outside, this attack vector can only be used in complex attacks, for example, with the involvement of an insider accomplice."
Click to expand...

Log in or Sign up

Citrix fixes critical bugs allowing takeover of XenMobile Servers [Citrix Endpoint Management (CEM)]

guest Guest

guest Guest

Log in or Sign up

Citrix fixes critical bugs allowing takeover of XenMobile Servers [Citrix Endpoint Management (CEM)]

guest Guest

guest Guest

Useful Searches