PT-2018-10026

CVE-2018-10648

·

Published

2018-05-23

·

Updated

2018-06-25

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.7 before RP3 Citrix XenMobile Server versions 10.8 before RP2
Description The issue concerns unauthenticated file upload vulnerabilities.
Recommendations For Citrix XenMobile Server version 10.7 before RP3, update to a version that includes RP3 or later to resolve the issue. For Citrix XenMobile Server version 10.8 before RP2, update to a version that includes RP2 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-434: Unrestricted Upload of File with Dangerous Type
Related identifiers
CVE-2018-10648
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com