PT-2014-5495 · Citrix · Citrix Vdi-In-A-Box

Publicado 2014-05-30 · Atualizado 2014-06-24 · CVE-2014-3780

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix VDI-In-A-Box versions 5.3.x through 5.3.7 Citrix VDI-In-A-Box versions 5.4.x through 5.4.3

Description The issue allows remote attackers to bypass authentication via unspecified vectors, related to a Java servlet.

Recommendations For versions 5.3.x through 5.3.7, update to version 5.3.8 or later. For versions 5.4.x through 5.4.3, update to version 5.4.4 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-3780

Produtos afetados

Citrix Vdi-In-A-Box

Referências · 5

• http://securityfocus.com/bid/67687 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3780 · Nota de Segurança
• http://securitytracker.com/id/1030305 · Nota
• http://secunia.com/advisories/58431 · Nota
• http://support.citrix.com/article/CTX140779 · Aviso do Fabricante