PT-2016-6355 · Citrix · Citrix Xenserver

Publicado 2016-06-13 · Atualizado 2016-06-20 · CVE-2016-5302

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Citrix XenServer versions prior to 7.0 Hotfix XS70E003

Description The issue might allow remote attackers on the management network to compromise a host by leveraging credentials for an Active Directory account, specifically when a deployment has been upgraded from an earlier release.

Recommendations For versions prior to 7.0 Hotfix XS70E003, apply Hotfix XS70E003 to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-5302

Produtos afetados

Citrix Xenserver

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-5302 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5302 · Nota de Segurança
• http://securitytracker.com/id/1036082 · Nota
• https://support.citrix.com/article/CTX213769 · Nota
• http://support.citrix.com/article/CTX213549 · Aviso do Fabricante