PT-2012-6263 · Citrix · Citrix Xendesktop Virtual Desktop Agent

Publicado 2012-12-26 · Atualizado 2017-08-29 · CVE-2012-6314

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Citrix XenDesktop Virtual Desktop Agent (VDA) versions 5.6.x through 5.6.199

Description The issue arises when changes are made to the server-side policy controlling USB redirection, and these changes are not propagated to the Virtual Desktop Agent (VDA). This allows authenticated users to retain access to the USB device.

Recommendations For versions 5.6.x through 5.6.199, update to version 5.6.200 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2012-6314

Produtos afetados

Citrix Xendesktop Virtual Desktop Agent

Referências · 7

• http://osvdb.org/88369 · Nota
• http://support.citrix.com/article/CTX135813 · Aviso do Fabricante
• http://secunia.com/advisories/51524 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-6314 · Nota de Segurança
• http://securitytracker.com/id?1027869 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80626 · Nota
• http://securityfocus.com/bid/56908 · Nota