PT-2014-6063

Name of the Vulnerable Software and Affected Versions Citrix XenDesktop versions 4.x through 7.x Description The issue allows local guest users to gain access to another user's desktop via unspecified vectors when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled...

CVE-2014-4700 - Vulnerability in Citrix XenDesktop could result in unauthorized access to another user's desktop

Description of Problem A vulnerability has been identified in Citrix XenDesktop that could result in a user gaining unauthorized interactive access to another user’s desktop. This vulnerability affects a specific, non-default configuration of Citrix XenDesktop 7 all versions up to and including...

CVE-2013-6077

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

Design/Logic Flaw

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

CVE-2013-6077

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

PT-2013-5943

Name of the Vulnerable Software and Affected Versions Citrix XenDesktop version 7.0 Description The issue arises when Citrix XenDesktop 7.0 is upgraded from XenDesktop 5.x, resulting in improper enforcement of policy rule permissions. This allows remote attackers to bypass intended restrictions...

CVE-2013-6077: Undefined Security Weakness

Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions...

Citrix XenDesktop BrokerAccessPolicyRule Policy Rule Remote Security Bypass

The remote host is running a version of Citrix XenDesktop that could be affected by a remote security bypass vulnerability, related to the 'BrokerAccessPolicyRule' policy rule. Note that this vulnerability only affects installations that have been upgraded from XenDesktop 5. Also, Nessus has not...

Citrix XenDesktop Director Detection

Binary data citrixxendesktopdirectordetect.nbin...

CVE-2012-6314

Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...

Command injection

Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...

CVE-2012-6314

CVE-2012-6314 affects Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x prior to 5.6.200. The issue is that server‑side USB redirection policy changes are not propagated to the VDA, allowing authenticated users to retain access to USB devices even after policy disables USB redirection. The vuln...

PT-2012-6263

Name of the Vulnerable Software and Affected Versions Citrix XenDesktop Virtual Desktop Agent VDA versions 5.6.x through 5.6.199 Description The issue arises when changes are made to the server-side policy controlling USB redirection, and these changes are not propagated to the Virtual Desktop...

CVE-2012-6314: Undefined Security Weakness

Citrix XenDesktop Virtual Desktop Agent VDA 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device...

Citrix XenDesktop Virtual Desktop Agent USB Redirection Propagation Handling Access Restriction Bypass (CTX135813)

The version of Citrix XenDesktop Virtual Desktop Agent contains a flaw in the server-side USB redirection policy. This could allow an authenticated user to gain access to their USB devices when the server-side policy has been modified to disable USB redirection. C Tenable Network Security, Inc...

Citrix XenApp和XenDesktop XML Service interface远程代码执行漏洞

Citrix XenDesktop是Citrix公司一款桌面虚拟化的产品。Citrix XenApp Citrix Presentation Server）应用虚拟化技术实现了快速的应用交付。不需要在用户设备上单独安装或管理应用系统，这样就使应用的测试、部署、管理和支持变得更加简单，系统可以智能地根据用户、应用和位置自动匹配最佳的交付方式。 Citrix XenApp和XenDesktop的XML Service interface在实现上存在漏洞，远程未经认证的攻击者可以利用此漏洞在系统上执行任意代码。 Citrix Presentation Server 4.x Citrix...

KLA10110 ACE vulnerability in Citrix

An unspecified vulnerability was found in Citrix products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to the ICA graphics packet via a specially designed HTML or ICA document. Original advisories...