CVE-2014-1910

MEDIUM 5.8CVE-2014-1910 · Published 21/02/2014 · updated 17/06/2026

In short

CVE-2014-1910 is a MEDIUM (CVSS 5.8) vulnerability affecting sharefile mobile (citrix), sharefile mobile for tablets (citrix).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sharefile mobile citrix	`≤ 2.4`	No fix yet
sharefile mobile for tablets citrix	`≤ 2.4`	No fix yet

Description

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References

secunia.com/advisories/57020 · Vendor Advisory
support.citrix.com/article/CTX140303 · Patch
securitytracker.com/id/1029791

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free