Description
Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
References
- 57020 third-party-advisory
- http://support.citrix.com/article/CTX140303
- 1029791 vdb-entry