Vulnerability in Citrix Vdi-In-A-Box
CVE-2014-2690
Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log.
EPSS: 0.003 (27.2th percentile) — read the EPSS interpretation.
Affected products
- Citrix Vdi-in-a-box — versions 5.3.0, 5.3.1, 5.3.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)