| Package | Affected versions | Patched versions |
|---|---|---|
| xenapp | = 6.5.0.0 |
Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free