Citrix XenMobile MDX Toolkit before 9.0.4 when used to wrap iOS 8 applications does not properly encrypt cached application data which allows context-dependent attackers to obtain sensitive information by reading the cache.