PT-2012-6263 · Citrix · Citrix Xendesktop Virtual Desktop Agent

Published 2012-12-26 · Updated 2017-08-29 · CVE-2012-6314

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Citrix XenDesktop Virtual Desktop Agent (VDA) versions 5.6.x through 5.6.199

Description The issue arises when changes are made to the server-side policy controlling USB redirection, and these changes are not propagated to the Virtual Desktop Agent (VDA). This allows authenticated users to retain access to the USB device.

Recommendations For versions 5.6.x through 5.6.199, update to version 5.6.200 or later to resolve the issue.

Fix

Related Identifiers

CVE-2012-6314

Affected Products

Citrix Xendesktop Virtual Desktop Agent

References · 7

• http://support.citrix.com/article/CTX135813 · Vendor Advisory
• http://secunia.com/advisories/51524 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6314 · Security Note
• http://osvdb.org/88369 · Note
• http://securitytracker.com/id?1027869 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80626 · Note
• http://securityfocus.com/bid/56908 · Note