PT-2021-12715

CVE-2020-8274

·

Published

2021-01-06

·

Updated

2021-01-12

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Citrix Secure Mail for Android versions prior to 20.11.0
Description: The issue allows unauthenticated access to read data stored within Secure Mail due to improper control of code generation, specifically 'Code Injection'. This can occur if a malicious app is installed on the Android device or if a threat actor executes arbitrary code on the device.
Recommendations: For versions prior to 20.11.0, update to version 20.11.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data within Secure Mail until the update can be applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾