PT-2002-1555 · Citrix · Citrix Nfuse

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0504

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix NFuse versions 1.6 and earlier

Description The issue is related to a cross-site scripting vulnerability. It does not properly quote results from the getLastError method, allowing remote attackers to execute script in other clients. This can be achieved via the NFuse Application parameter to launch.jsp or launch.asp API endpoints.

Recommendations For Citrix NFuse versions 1.6 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-0504

Produtos afetados

Citrix Nfuse

Referências · 5

• 🔥 https://exploit-db.com/exploits/21355 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-03/0334.html · Exploit
• 🔥 http://iss.net/security_center/static/8659.php · Exploit
• 🔥 http://securityfocus.com/bid/4372 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0504 · Nota de Segurança