---
id: 5128
title: "[CVE-2020-8209] Path Traversal on Citrix XenMobile Server"
cve: CVE-2020-8209
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/path-traversal-on-citrix-xenmobile-server/"
published_at: "2020-11-16T14:35:28Z"
tags: ["vulnerability-research", "path-traversal", "citrix", "cve"]
phying_url: "https://phying.com/item/5128"
lang: en
---

# [CVE-2020-8209] Path Traversal on Citrix XenMobile Server

## Summary

CVE-2020-8209 in Citrix XenMobile Server: a path traversal in help-sb-download.jsp lets unauthenticated attackers read arbitrary files — including sftu.properties with encrypted passwords and the key files needed to decrypt them.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **CVE:** CVE-2020-8209
- **Published:** 2020-11-16T14:35:28Z
- **Original:** https://swarm.ptsecurity.com/path-traversal-on-citrix-xenmobile-server/
- **Phying News:** https://phying.com/item/5128