CVE-2016-4810

Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1), and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Controller via unspecified vectors.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2016-06-01

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Xenapp (Citrix)
• Xendesktop (Citrix)

References

• http://support.citrix.com/article/CTX213045
• http://www.securitytracker.com/id/1036021