Medium severity5.3NVD Advisory· Published May 5, 2017· Updated Jun 17, 2026
CVE-2016-6877
CVE-2016-6877
Description
Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. NOTE: the vendor reports "our internal analysis of this issue concluded that this was not a valid vulnerability" because an exploitation scenario would involve a man-in-the-middle attack against a TLS session
Affected products
2cpe:2.3:a:citrix:xenmobile_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:citrix:xenmobile_server:*:*:*:*:*:*:*:*range: <=10.3.6.310
- (no CPE)range: <10.5.0.24
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/98341nvdThird Party AdvisoryVDB Entry
- www.solutionary.com/threat-intelligence/vulnerability-disclosures/2017/03/citrix-xenmobile-server/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.