CVE-2021-44520

概要

参考情報

• docs.citrix.com/en-us/xenmobile/server/document-history.html · Vendor Advisory
• gist.github.com/tree-chtsec/766f81e22ae383987d75eedb3b23b709 · Third Party Advisory
• support.citrix.com/article/CTX370551 · Vendor Advisory
• chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe

xenmobile server のその他の脆弱性

• CVE-2021-44519高 8.8In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution.
• CVE-2022-26151高 7.2Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.
• CVE-2020-8253高 7.5Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10…
• CVE-2020-8212緊急 9.8Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10…
• CVE-2020-8211緊急 9.8Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.…