PT-2013-5943 · Citrix · Citrix Xendesktop

Publicado 2013-11-05 · Atualizado 2013-11-07 · CVE-2013-6077

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Citrix XenDesktop version 7.0

Description The issue arises when Citrix XenDesktop 7.0 is upgraded from XenDesktop 5.x, resulting in improper enforcement of policy rule permissions. This allows remote attackers to bypass intended restrictions.

Recommendations For Citrix XenDesktop version 7.0, ensure that policy rule permissions are manually reviewed and enforced after the upgrade from XenDesktop 5.x to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-6077

Produtos afetados

Citrix Xendesktop

Referências · 3

• http://support.citrix.com/article/CTX138627 · Aviso do Fabricante
• http://osvdb.org/98890 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-6077 · Nota de Segurança