PT-2014-6063 · Citrix · Citrix Xendesktop

Publicado 2014-07-11 · Atualizado 2018-12-18 · CVE-2014-4700

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:A/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix XenDesktop versions 4.x through 7.x

Description The issue allows local guest users to gain access to another user's desktop via unspecified vectors when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled.

Recommendations For versions 4.x through 7.x, consider enabling ShutdownDesktopsAfterUse to prevent unauthorized access to desktops. Additionally, restrict access to pooled random desktop groups to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-4700

Produtos afetados

Citrix Xendesktop

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/94460 · Nota
• http://secunia.com/advisories/59889 · Nota
• http://securityfocus.com/bid/68530 · Nota
• http://securitytracker.com/id/1030566 · Nota
• http://support.citrix.com/article/CTX139591 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-4700 · Nota de Segurança