Lucene search
HistoryApr 15, 2014 - 2:55 p.m.
CVE-2014-2690
citrix
vdi-in-a-box
security
vulnerability
cve-2014-2690
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log.
Affected configurations
Node
citrixvdi-in-a-boxMatch5.3.0
ORcitrixvdi-in-a-boxMatch5.3.1
ORcitrixvdi-in-a-boxMatch5.3.2
ORcitrixvdi-in-a-boxMatch5.3.3
ORcitrixvdi-in-a-boxMatch5.3.4
ORcitrixvdi-in-a-boxMatch5.3.5
ORcitrixvdi-in-a-boxMatch5.4.0
ORcitrixvdi-in-a-boxMatch5.4.1
ORcitrixvdi-in-a-boxMatch5.4.2
Related
prion
prion
Command injection
2014-04-15 14:55:00
cvelist
cvelist
CVE-2014-2690
2014-04-15 14:00:00
nvd
nvd
CVE-2014-2690
2014-04-15 14:55:04
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2014-2690