Citrix Xenserver Directory Traversal (CVE-2018-14007)

A directory traversal vulnerability exists in citrix xenserver. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

CVE-2018-14007

CVE-2018-14007 describes a directory traversal in Citrix XenServer 7.1 and newer via an unauthenticated/HTTP endpoint in XAPI. The issue allows an attacker on the management network to read arbitrary files from the dom0 filesystem, potentially gaining full administrator access as described in XSA...

CVE-2018-14007

Citrix XenServer 7.1 and newer allows Directory Traversal...