Lucene search

K
cveMitreCVE-2013-2757
HistoryMay 23, 2014 - 2:55 p.m.

CVE-2013-2757

2014-05-2314:55:10
CWE-264
mitre
web.nvd.nist.gov
22
citrix
cloudplatform
cloudstack
cve-2013-2757
vnc ports
access restriction
security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.014

Percentile

86.5%

Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.

Affected configurations

Nvd
Node
citrixcloudplatformMatch3.0
OR
citrixcloudplatformMatch3.0.3
OR
citrixcloudplatformMatch3.0.4
OR
citrixcloudplatformMatch3.0.5
OR
citrixcloudplatformMatch3.0.6
VendorProductVersionCPE
citrixcloudplatform3.0cpe:2.3:a:citrix:cloudplatform:3.0:*:*:*:*:*:*:*
citrixcloudplatform3.0.3cpe:2.3:a:citrix:cloudplatform:3.0.3:*:*:*:*:*:*:*
citrixcloudplatform3.0.4cpe:2.3:a:citrix:cloudplatform:3.0.4:*:*:*:*:*:*:*
citrixcloudplatform3.0.5cpe:2.3:a:citrix:cloudplatform:3.0.5:*:*:*:*:*:*:*
citrixcloudplatform3.0.6cpe:2.3:a:citrix:cloudplatform:3.0.6:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.014

Percentile

86.5%

Related for CVE-2013-2757