Skip to content
OpenAdvisories
Unscored CVE-2020-8275 EUVD-2020-29143GHSA-q23c-mjcp-8vj6

Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar…

Published Jan 6, 2021 · Updated Aug 4, 2024 · Assigned by hackerone

Description

Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device.

Affected products

VendorProductAffectedFixed
— Citrix Secure Mail for Android Fixed in 20.11.0 —

References