PT-2018-14321 · Citrix · Citrix Xen Mobile

Glyn Wintle · Publicado 2018-10-24 · Atualizado 2024-08-05 · CVE-2018-18014

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Citrix Xen Mobile versions through 10.8

Description The issue allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000, and 30001. The vendor disputes that this is an issue, stating it is already mitigated by the internal firewall that limits access to configuration services to localhost.

Recommendations For Citrix Xen Mobile versions through 10.8, consider restricting access to the private services listening on ports 8000, 30000, and 30001 to minimize the risk of exploitation. As a temporary workaround, limit the ability of low-privileged local users to make requests to these services until a more definitive resolution is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-18014

Produtos afetados

Citrix Xen Mobile

Referências · 5

• 🔥 https://advisories.dxw.com/advisories/xen-mobile-backing-service-allows-unauthenticated-local-users-to-execute-system-commands-as-root · Exploit
• https://osv.dev/vulnerability/CVE-2018-18014 · Aviso do Fabricante
• https://t.me/cvenotify/89189 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2018-18014 · Nota de Segurança
• https://t.me/cvenotify/84551 · Publicação no Telegram