Citrix XenDesktop/XenServer authentication credential information leakage Vulnerability

Release date: 2011-12-15
Updated on: 2011-12-29

Affected Systems:
Citrix xenserver5.6 SP2
Citrix XenDesktop
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51075

Citrix XenDesktop is a desktop virtualization product of Citrix.

Citrix XenDesktop and XenServer have the information leakage vulnerability in identity authentication. Remote attackers can exploit this vulnerability to obtain sensitive information through man-in-the-middle attacks.

<* Source: vtek63
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Citrix
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.citrix.com/