CVE-2020-8274: Code Injection
Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-8274?
CVE-2020-8274 is rated as high severity due to its potential for code injection and unauthorized data access.
How do I fix CVE-2020-8274?
The recommended fix for CVE-2020-8274 is to update Citrix Secure Mail to version 20.11.0 or later.
What type of vulnerability is CVE-2020-8274?
CVE-2020-8274 is classified as a code injection vulnerability resulting from improper access controls.
Can CVE-2020-8274 affect data security?
Yes, CVE-2020-8274 can compromise data security by allowing unauthorized applications to read sensitive information in Secure Mail.
Who is affected by CVE-2020-8274?
Users of Citrix Secure Mail for Android versions prior to 20.11.0 are affected by CVE-2020-8274.