VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Jun 5, 2019· Updated Jun 17, 2026

CVE-2018-18571

CVE-2018-18571

Description

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management (MAM) enrolled device.

Affected products

11
  • Citrix Systems/Xenmobile Server10 versions
    cpe:2.3:a:citrix:xenmobile_server:10.8.0:-:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:citrix:xenmobile_server:10.8.0:-:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.8.0:rolling_patch1:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.8.0:rolling_patch2:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.8.0:rolling_patch3:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.8.0:rolling_patch4:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.8.0:rolling_patch5:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.9.0:-:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.9.0:rolling_patch1:*:*:*:*:*:*
    • cpe:2.3:a:citrix:xenmobile_server:10.9.0:rolling_patch2:*:*:*:*:*:*
    • (no CPE)range: <10.8.0 RP6, <10.9.0 RP3
  • Citrix/XenMobile Serverdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.