PT-2016-6154 · Citrix · Citrix Xendesktop+2

Publicado 2016-06-01 · Atualizado 2016-11-30 · CVE-2016-4810

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Citrix Studio versions prior to 7.6.1000 Citrix XenDesktop 7.x versions prior to 7.6 LTSR Cumulative Update 1 (CU1) Citrix XenApp versions 7.5 and 7.6

Description The issue allows attackers to set Access Policy rules on the XenDesktop Delivery Controller.

Recommendations For Citrix Studio versions prior to 7.6.1000, update to version 7.6.1000 or later. For Citrix XenDesktop 7.x versions prior to 7.6 LTSR Cumulative Update 1 (CU1), apply Cumulative Update 1 (CU1) or later. For Citrix XenApp versions 7.5 and 7.6, update to a version that is not affected by this issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-4810

Produtos afetados

Citrix Studio

Citrix Xenapp

Citrix Xendesktop

Referências · 4

• http://securitytracker.com/id/1036021 · Nota
• http://support.citrix.com/article/CTX213045 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-4810 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4810 · Nota de Segurança