Description
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/68530
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030566
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59889
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/94460
Patch, Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX139591
Scores
EPSS
0.0026
EPSS Percentile
49.5%
Details
CWE
CWE-264
Status
published
Products (3)
citrix/xendesktop
4.0 (3 CPE variants)
citrix/xendesktop
5.6 fp1
citrix/xendesktop
5.0 - 5.6
Published
Jul 11, 2014
Tracked Since
Feb 18, 2026