CVE-2017-5573
published 2017-01-30CVE-2017-5573: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other…
PriorityP421medium4.9CVSS 3.0
AVNACLPRHUINSUCNIHAN
EPSS
1.09%
65.3th percentile
An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_hypervisor | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | endpoint_management | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | xenserver | — | — |
| citrix | xenserver | — | — |
| citrix | xenserver | — | — |
| citrix | xenserver | — | — |
| citrix | xenserver | — | — |
CVSS provenance
nvdv3.04.9MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Citrix
CVE-2017-5573: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other a
vendor_citrix·2017-01-30·CVSS 4.9
CVE-2017-5573 [MEDIUM] CVE-2017-5573: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other a
CVE-2017-5573: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators.
Citrix
Citrix Security Bulletin CTX220112
vendor_citrix·CVSS 7.5
CVE-2015-7704 [HIGH] Citrix Security Bulletin CTX220112
Citrix Security Bulletin CTX220112
CVE References: CVE-2015-7704, CVE-2015-7705, CVE-2017-5572, CVE-2017-5573, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
Citrix
Citrix Security Bulletin CTX220112
vendor_citrix·CVSS 6.5
CVE-2017-5572 [MEDIUM] Citrix Security Bulletin CTX220112
Citrix Security Bulletin CTX220112
CVE References: CVE-2017-5572, CVE-2017-5573, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
VulDB
Citrix XenServer 6.0.2/6.2.0/6.5/7.0 Task access control (CTX220112 / CTX220079/CTX220080/CTX220081)
vuldb·2026-05-17·CVSS 4.9
CVE-2017-5573 [MEDIUM] Citrix XenServer 6.0.2/6.2.0/6.5/7.0 Task access control (CTX220112 / CTX220079/CTX220080/CTX220081)
A vulnerability classified as problematic was found in Citrix XenServer 6.0.2/6.2.0/6.5/7.0. Affected is an unknown function of the component Task Handler. Executing a manipulation can lead to improper access controls.
This vulnerability is registered as CVE-2017-5573. It is possible to launch the attack remotely. No exploit is available.
Applying a patch is advised to resolve this issue.
GHSA
GHSA-jcj7-2jwq-pqgq: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7
ghsa_unreviewed·2022-05-13
CVE-2017-5573 [MEDIUM] GHSA-jcj7-2jwq-pqgq: An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7
An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-01-30
Published