CVE-2012-6314

Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the server-side policy that control USB redirection, does not propagate changes to the VDA, which allows authenticated users to retain access to the USB device.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2012-12-26

Last modified

2024-08-06

Affected products

• Xendesktop (Citrix)

References

• http://osvdb.org/88369
• http://secunia.com/advisories/51524
• http://support.citrix.com/article/CTX135813
• http://www.securityfocus.com/bid/56908
• http://www.securitytracker.com/id?1027869
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80626