CVE-2014-1910

Published: Feb 21, 2014Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected (2)

Products: Citrix: Sharefile Mobile, Sharefile Mobile For Tablets

Citrix

2 products

Sharefile Mobile

Sharefile Mobile For Tablets

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Citrix Sharefile Mobile	Up to 2.4
Citrix Sharefile Mobile For Tablets	Up to 2.4

Related CWEs

CWE-310

References (6)

http://secunia.com/advisories/57020

Source: cve@mitre.org

Vendor Advisory

http://support.citrix.com/article/CTX140303

Source: cve@mitre.org

PatchVendor Advisory

http://www.securitytracker.com/id/1029791

Source: cve@mitre.org

http://secunia.com/advisories/57020

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.citrix.com/article/CTX140303

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securitytracker.com/id/1029791

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.