CVE Catalog
CVE-2016-5302
CriticalSummary
Citrix XenServer 7.0 before Hotfix XS70E003, when upgraded from an earlier release, may allow remote attackers on the management network to 'compromise' a host by leveraging credentials for an Active Directory account.
Risk Assessment
Attackers may gain access to critical system resources, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to install Hotfix XS70E003 and to monitor and secure Active Directory credentials.
Original NVD description (English source)
Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account.