CVE-2016-5302 Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging cr...
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix xenserver | <= 7.0 | No fix listed |
References
- support.citrix.com vendor-advisory
- 1036082 vdb-entry
- support.citrix.com