CVE-2020-8275: Medium severity citrix vulnerability

Q: What is the severity of CVE-2020-8275?

CVE-2020-8275 has a medium severity rating due to improper access control in Citrix Secure Mail for Android.

Q: How do I fix CVE-2020-8275?

To fix CVE-2020-8275, upgrade Citrix Secure Mail for Android to version 20.11.0 or later.

Q: What type of data is exposed by CVE-2020-8275?

CVE-2020-8275 allows unauthorized access to limited calendar-related data in Citrix Secure Mail.

Q: What versions of Citrix Secure Mail are impacted by CVE-2020-8275?

CVE-2020-8275 affects all versions of Citrix Secure Mail for Android prior to 20.11.0.

Q: Can CVE-2020-8275 be exploited remotely?

CVE-2020-8275 requires a malicious app to be installed locally on the device for exploitation.

Published Jan 6, 2021

Updated

Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device.

Affected Software

1 affected component

Citrix Secure Mail Android<20.11.0

Event History

Jan 6, 2021

CVE Published

via MITRE·08:58 PM

Data Sourced

via MITRE·08:58 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-8275?

CVE-2020-8275 has a medium severity rating due to improper access control in Citrix Secure Mail for Android.

How do I fix CVE-2020-8275?

To fix CVE-2020-8275, upgrade Citrix Secure Mail for Android to version 20.11.0 or later.

What type of data is exposed by CVE-2020-8275?

CVE-2020-8275 allows unauthorized access to limited calendar-related data in Citrix Secure Mail.

What versions of Citrix Secure Mail are impacted by CVE-2020-8275?

CVE-2020-8275 affects all versions of Citrix Secure Mail for Android prior to 20.11.0.

Can CVE-2020-8275 be exploited remotely?