PT-2014-2630 · Citrix · Citrix Cloudplatform

Published 2014-05-23 · Updated 2017-08-29 · CVE-2013-2757

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix CloudPlatform versions 3.0.x through 3.0.5

Description The issue is related to improper restriction of access to VNC ports on the management network. This allows remote attackers to have an unspecified impact.

Recommendations For versions 3.0.x through 3.0.5, apply Patch C to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-2757

Affected Products

Citrix Cloudplatform

References · 7

• http://support.citrix.com/article/CTX135815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2757 · Security Note
• http://secunia.com/advisories/53204 · Note
• http://osvdb.org/92746 · Note
• http://securityfocus.com/bid/59467 · Note
• http://securitytracker.com/id/1028473 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83783 · Note