6.5

CVE-2017-5572

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Xenserver Version 6.0.2
Citrix ≫ Xenserver Version 6.2.0
Citrix ≫ Xenserver Version 6.5
Citrix ≫ Xenserver Version 7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.1% 0.619
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 1.2 5.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
NIST 5.5 8 4.9
AV:N/AC:L/Au:S/C:N/I:P/A:P
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://www.securityfocus.com/bid/95801
http://www.securitytracker.com/id/1037716
https://support.citrix.com/article/CTX220112