Description
Citrix XenDesktop 7.x, 5.x, and 4.x, when pooled random desktop groups is enabled and ShutdownDesktopsAfterUse is disabled, allows local guest users to gain access to another user's desktop via unspecified vectors.
References
- 68530 vdb-entry
- 1030566 vdb-entry
- 59889 third-party-advisory
- citrix-desktop-cve20144700-unauth-access(94460) vdb-entry
- http://support.citrix.com/article/CTX139591