CVE-2014-1910 — MEDIUM (5.8)

Q: How severe is CVE-2014-1910?

CVE-2014-1910 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2014-1910?

Check the references section above for vendor advisories and patch information. Affected products include: Citrix Sharefile Mobile, Citrix Sharefile Mobile For Tablets.

Vulnerability Description

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS Score

5.8

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:N

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Citrix	Sharefile Mobile	<= 2.4
Citrix	Sharefile Mobile For Tablets	<= 2.4

Related Weaknesses (CWE)

CWE-310

References

http://secunia.com/advisories/57020Vendor Advisory
http://support.citrix.com/article/CTX140303PatchVendor Advisory
http://www.securitytracker.com/id/1029791
http://secunia.com/advisories/57020Vendor Advisory
http://support.citrix.com/article/CTX140303PatchVendor Advisory
http://www.securitytracker.com/id/1029791

FAQ

What is CVE-2014-1910?

CVE-2014-1910 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain...

How severe is CVE-2014-1910?

CVE-2014-1910 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-1910?

Check the references section above for vendor advisories and patch information. Affected products include: Citrix Sharefile Mobile, Citrix Sharefile Mobile For Tablets.