medium4.9
CVE-2014-4700
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain ac…
Impact
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Xendesktop | from 5.0 through 5.6 from 7.0 through 7.11 Versions 4.0, 5.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/59889
- http://support.citrix.com/article/CTX139591
- http://www.securityfocus.com/bid/68530
- http://www.securitytracker.com/id/1030566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94460
- http://secunia.com/advisories/59889
- http://support.citrix.com/article/CTX139591
- http://www.securityfocus.com/bid/68530
- http://www.securitytracker.com/id/1030566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94460