CWE Code: 287
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Authentication
Summary: ** disputed *** lack of authentication in citrix xen mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001.  note: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost."
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-10-24
Last Modified Date: 2019-10-03