CVE-2017-5573

4.9MEDIUM

Key Information:

Vendor: Citrix
Status: Xenserver
Vendor: CVE Published:; 30 January 2017

Summary

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators.

References

https://support.citrix.com/article/CTX220112

x_refsource_CONFIRM

http://www.securitytracker.com/id/1037716

vdb-entryx_refsource_SECTRACK

http://www.securityfocus.com/bid/95796

vdb-entryx_refsource_BID

CVSS V3.1

Score:

4.9

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jan 30, 2017
Vulnerability Reserved
Jan 23, 2017

Collectors

NVD DatabaseMitre Database