Security · High impactFan score 45 · Tier B
Critical Xen Orchestra Flaws Exploited in Attacks
SecurityWeek · By Ionut Arghire ·
The Brief
- A critical authentication bypass in Xen Orchestra allows attackers to execute arbitrary code as admin.
- The flaws are reported to be exploited in attacks.
- Attackers can take over XCP-ng nodes managed through Xen Orchestra.
Why it matters
Xen Orchestra manages XCP-ng hypervisors, so a compromise can give attackers admin control over the virtualization nodes that host workloads.
Who’s affected
- Xen Orchestra administrators
- XCP-ng operators
- #security
- #virtualization
- #xen-orchestra
- #xcp-ng
- #authentication-bypass
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes. The post Critical Xen Orchestra Flaws Exploited in Attacks appeared first on SecurityWeek .
Timeline
Exploitation of the flaws in attacks reported by SecurityWeek
SecurityWeek
Critical Xen Orchestra Flaws Exploited in Attacks