CVE-2014-4700 Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspec...
MediumCVSS 4.9
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix xendesktop | >= 5.0, <= 5.6 | No fix listed |
| citrix xendesktop | >= 7.0, <= 7.11 | No fix listed |
| citrix xendesktop | = 4.0 | No fix listed |
| citrix xendesktop | = 4.0-fp1 | No fix listed |
| citrix xendesktop | = 4.0-fp2 | No fix listed |
| citrix xendesktop | = 5.6-fp1 | No fix listed |
References
- 59889 third-party-advisory
- support.citrix.com patch vendor-advisory
- 68530 third-party-advisory vdb-entry
- 1030566 third-party-advisory vdb-entry
- citrix-desktop-cve20144700-unauth-access(94460) third-party-advisory vdb-entry