CVE-2014-4700
First published: Fri Jul 11 2014(Updated: )
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix Virtual Apps and Desktops | >=5.0<=5.6 | |
| Citrix Virtual Apps and Desktops | >=7.0<=7.11 | |
| Citrix Virtual Apps and Desktops | =4.0 | |
| Citrix Virtual Apps and Desktops | =4.0-fp1 | |
| Citrix Virtual Apps and Desktops | =4.0-fp2 | |
| Citrix Virtual Apps and Desktops | =5.6-fp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-4700?
CVE-2014-4700 is classified as a high severity vulnerability due to the potential for unauthorized access to user desktops.
How do I fix CVE-2014-4700?
To fix CVE-2014-4700, ensure that the ShutdownDesktopsAfterUse setting is enabled in your Citrix XenDesktop configuration.
Which versions of Citrix XenDesktop are affected by CVE-2014-4700?
CVE-2014-4700 affects Citrix XenDesktop versions 4.x, 5.x, and 7.x prior to version 7.11.
What happens if CVE-2014-4700 is exploited?
If exploited, CVE-2014-4700 allows malicious local guest users to gain unauthorized access to another user's desktop.
Is there a workaround for CVE-2014-4700?
A temporary workaround for CVE-2014-4700 is to restrict local guest access until a permanent fix can be applied.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/citrix
- canonical/citrix virtual apps and desktops
- version/citrix virtual apps and desktops/5.0
- version/citrix virtual apps and desktops/5.6
- version/citrix virtual apps and desktops/7.0
- version/citrix virtual apps and desktops/7.11
- version/citrix virtual apps and desktops/4.0
- version/citrix virtual apps and desktops/4.0-fp1
- version/citrix virtual apps and desktops/4.0-fp2
- version/citrix virtual apps and desktops/5.6-fp1