CVE-2014-3780

Citrix VDI-In-A-Box 5.3.x < 5.3.8 and 5.4.x < 5.4.4 - Authentication Bypass via Java Servlet

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to bypass authentication via unspecified vectors, related to a Java servlet.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX140779
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030305
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67687
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58431

Scores

EPSS 0.0041
EPSS Percentile 61.5%

Details

CWE
CWE-287
Status published
Products (12)
citrix/vdi-in-a-box 5.3.0
citrix/vdi-in-a-box 5.3.1
citrix/vdi-in-a-box 5.3.2
citrix/vdi-in-a-box 5.3.3
citrix/vdi-in-a-box 5.3.4
citrix/vdi-in-a-box 5.3.5
citrix/vdi-in-a-box 5.3.6
citrix/vdi-in-a-box 5.3.7
citrix/vdi-in-a-box 5.4.0
citrix/vdi-in-a-box 5.4.1
... and 2 more
Published May 30, 2014
Tracked Since Feb 18, 2026