Improper Access Restriction to VNC Ports in Citrix CloudPlatform 3.0.x

CVE-2013-2757 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.

Learn more about our Cloud Audit.