PT-2014-2630 · Citrix · Citrix Cloudplatform

Publicado 2014-05-23 · Atualizado 2017-08-29 · CVE-2013-2757

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix CloudPlatform versions 3.0.x through 3.0.5

Description The issue is related to improper restriction of access to VNC ports on the management network. This allows remote attackers to have an unspecified impact.

Recommendations For versions 3.0.x through 3.0.5, apply Patch C to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-2757

Produtos afetados

Citrix Cloudplatform

Referências · 7

• http://secunia.com/advisories/53204 · Nota
• http://osvdb.org/92746 · Nota
• http://support.citrix.com/article/CTX135815 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2757 · Nota de Segurança
• http://securityfocus.com/bid/59467 · Nota
• http://securitytracker.com/id/1028473 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83783 · Nota