Security Advisory
CVE-2013-6077
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions.