CVE-2016-9677 — Sensitive Information Exposure in Citrix Provisioning Services

CWE-200 — Sensitive Information Exposure4 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.3%
top 44.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Citrix Provisioning ServicesCitrix ADMCitrix Hypervisor+5 more
Timeline
PublishedJan 18
Latest updateMay 17

Description

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages8 packages

🔴Vulnerability Details

1
GHSA
GHSA-5g9m-x68j-5mr2: Citrix Provisioning Services before 7↗2022-05-17
▶

📋Vendor Advisories

2
Citrix
CVE-2016-9677: Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors.↗2017-01-18
▶
Citrix
Citrix Security Bulletin CTX219580↗
▶