Example Analysis of Citrix Endpoint Management arbitrary File read vulnerability CVE-2020-8209

Today, I will talk to you about the example analysis of Citrix Endpoint Management arbitrary file reading vulnerability CVE-2020-8209, which may not be well understood by many people. in order to make you understand better, the editor has summarized the following contents for you. I hope you can get something according to this article.

CVE-2020-8209 (Citrix Endpoint Management arbitrary file read)

1. Vulnerability description:

XenMobile is an enterprise mobility management software developed by Citrix. The product allows enterprises to manage employees' mobile devices and mobile applications. The purpose of the software is to increase productivity by allowing employees to work securely on business-owned and personal mobile devices and applications.

There is an arbitrary file reading vulnerability in Citrix Endpoint Management, which can cause a remote unauthorized attacker to read arbitrary files on the affected device by sending a specially crafted HTTP request.

Second, influence the version

The following versions are seriously affected

XenMobile Server

< 10.12 RP2 XenMobile Server < 10.11 RP4 XenMobile Server < 10.10 RP6 XenMobile Server < 10.9 RP5 以下版本受到中等影响 XenMobile Server < 10.12 RP3 XenMobile Server < 10.11 RP6 XenMobile Server < 10.10 RP6 XenMobile Server < 10.9 RP5 三、漏洞复现 POC很简单：直接访问url路径就是 /jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd

Download the file by direct access.

Try to run in batches (basically more used abroad):

4. Suggestions for repair:

Install patches based on version

XenMobile Server 10.12 RP3 XenMobile Server 10.11 RP6 XenMobile Server 10.10 RP6 XenMobile Server 10.9 RP5

After reading the above, do you have any further understanding of the example analysis of Citrix Endpoint Management arbitrary file read vulnerability CVE-2020-8209? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.