CVEvulnerability
CVE-2014-4700
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:A/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
Affected configurations
• citrix xendesktop (>= 5.0 <= 5.6)
• citrix xendesktop (>= 7.0 <= 7.11)
• citrix xendesktop 4.0
• citrix xendesktop 5.6
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/59889 Third Party Advisory
- http://support.citrix.com/article/CTX139591 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/68530 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030566 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94460 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/59889 Third Party Advisory
- http://support.citrix.com/article/CTX139591 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/68530 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030566 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94460 Third Party Advisory, VDB Entry