The Citrix XenMobile team has send out the following announcement regarding the new XenMobile Update:
A security bulletin was issued on October 29th for XenMobile, specifically for the MDX Toolkit and SDK. This fix is specific to iOS 8.
What is this release all about?
iOS 8 introduced a change in how the operating system manages data caching for apps. The MDX Toolkit 9.0.4 fix disables data caching on the disk for MDX wrapped apps avoiding the potential for data leakage. The Worx App Suite (WorxMail, WorxWeb, WorxNotes, ShareFile, WorxEdit) requires re-wrapping.
Impact for app developers!
If you are developing your own applications or obtain from a 3rd party, ensure that the iOS application is using NSURLCache as a caching mechanism in the context of URL loading system (NSURLConnection), additionally your application requires the new Worx App SDK and MDX Toolkit to address this vulnerability.
The change in the SDK and MDX Toolkit disables disk caching using the NSURLCache mechanism.
The following sources have been used to create this post:
Citrix XenMobile Partner communication