Thursday 5 November
Global

Your region, kept on this device.

Citrix patches critical XenServer flaw allowing unauthenticated host takeover

Severity
Critical
Sources
1

Citrix has released security updates for its XenServer virtualisation software to fix a serious flaw. The flaw could let an attacker with access to the management network take control of the servers that run virtual machines, without needing to log in.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

  1. Apply the security updates for XenServer 8.4 and 9 described in bulletin CTX697256.
  2. Check the CTX697256 bulletin for the full list of nine CVEs and confirm which hosts are affected.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Thu 5 NovemberCritical Citrix XenServer Flaw Allows Unauthenticated Attackers to Take Control of Virtualization HostsGBHackers

Who reported · 1 outlet

GBHackers

Report a problem