PT-2015-3058 · Citrix · Citrix Netscaler Application Delivery Controller+1

Publicado 2015-09-17 · Atualizado 2016-12-22 · CVE-2015-5538

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller (ADC) versions prior to 10.1 Build 132.8 Citrix NetScaler Application Delivery Controller (ADC) versions 10.5 prior to Build 57.7 Citrix NetScaler Gateway versions 10.5e prior to Build 56.1505.e

Description The issue is related to multiple unspecified vulnerabilities in the Command Line Interface (CLI) and the Web User Interface (UI) of the affected systems. These vulnerabilities can be exploited by remote attackers to gain privileges via unknown vectors. The vulnerabilities are associated with errors in the code.

Recommendations For versions prior to 10.1 Build 132.8, update to Build 132.8 or later. For versions 10.5 prior to Build 57.7, update to Build 57.7 or later. For versions 10.5e prior to Build 56.1505.e, update to Build 56.1505.e or later. As a temporary workaround, consider restricting access to the CLI and UI components to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2016-00263

CVE-2015-5538

Produtos afetados

Citrix Netscaler Application Delivery Controller

Citrix Netscaler Gateway

Referências · 4

• https://bdu.fstec.ru/vul/2016-00263 · Nota de Segurança
• http://securitytracker.com/id/1033618 · Nota
• http://support.citrix.com/article/CTX201334 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-5538 · Nota de Segurança