CVE-2014-2690

CVE-2014-2690 is a low-severity vulnerability affecting Citrix VDI-in-a-Box versions 5.3.x before 5.3.6 and 5.4.x before 5.4.3. A local attacker can exploit this flaw to read log files and obtain administrator credentials, leading to a potential compromise of confidentiality. The CVSS score is 2.1, indicating a low attack complexity and impact, as it requires local access to the system. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.