What is the CVSS score of CVE-2014-1910?

CVE-2014-1910 has a CVSS 2.0 base score of 5.8 (Medium). CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2014-1910?

Yes, a patch is available for CVE-2014-1910. Update the affected software to the latest version immediately.

Sharefile Mobile CVE-2014-1910

MEDIUM

Cryptographic Issues (CWE-310)

2014-02-21 cve@mitre.org

Citrix Information Disclosure Google Sharefile Mobile Sharefile Mobile For Tablets

5.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.8 MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Feb 21, 2014 - 15:30 cve.org

MEDIUM 5.8

DescriptionCVE.org

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

AnalysisAI

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable.

Technical ContextAI

This vulnerability is classified under CWE-310. Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Affected products include: Citrix Sharefile Mobile, Citrix Sharefile Mobile For Tablets. Version information: before 2.4.4.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.