News
Focus areas
Alterkom products
Catalog
Services
Knowledge
About
References
Contact
Citrix published bulletin CTX697257 for XenServer 8.4 and 9. The host trusted-CA list included a public CA whose intermediate certificates have weak keys — an attacker on the management network could forge a TLS certificate and impersonate a trusted LDAPS server.