CVE-2014-2690

Citrix VDI-in-a-Box 5.3.x before 5.3.6 and 5.4.x before 5.4.3 allows local users to obtain administrator credentials by reading the log.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2014-04-15

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Vdi-in-a-box (Citrix)

References

• http://secunia.com/advisories/57734
• http://support.citrix.com/article/CTX140106
• http://www.securitytracker.com/id/1030068