آسیب پذیری امنیتی Citrix XenServer

[fara_server]

درود...
سایت Secunia از کشف چند آسیب پذیری جدید در Citrix XenServer vSwitch Controller Component خبر داده است که به شرح زیر می باشد:

Description
Some vulnerabilities with an unknown impact have been reported in Citrix XenServer.

The vulnerabilities are caused due to unspecified errors in the management web interface of the vSwitch Controller component.

The vulnerabilities are reported in XenServer versions 5.6, 5.6 FP 1, 5.6 SP 2, and 6 using the vSwitch Controller component prior to version 6.0.2.


Solution
Update the vSwitch Controller component to version 6.0.2.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Maxin Tsoy, Kirill Mosolov, and Ilya Smith, Positive Research Center

Original Advisory
CTX132476 - Multiple Vulnerabilities in Citrix XenServer vSwitch Controller - Citrix Knowledge Center

Deep Links
Links available in Customer Area

شایان ذکر است برای حل این ریسک امنیتی باید Vswitch CC را به ورژن 6.0.2 آپدیت نمایید.

منبع:Citrix XenServer vSwitch Controller Component Multiple Unspecified Vulnerabilities - Secunia.com