PT-2015-3058 · Citrix · Citrix Netscaler Application Delivery Controller+1

Published 2015-09-17 · Updated 2016-12-22 · CVE-2015-5538

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller (ADC) versions prior to 10.1 Build 132.8 Citrix NetScaler Application Delivery Controller (ADC) versions 10.5 prior to Build 57.7 Citrix NetScaler Gateway versions 10.5e prior to Build 56.1505.e

Description The issue is related to multiple unspecified vulnerabilities in the Command Line Interface (CLI) and the Web User Interface (UI) of the affected systems. These vulnerabilities can be exploited by remote attackers to gain privileges via unknown vectors. The vulnerabilities are associated with errors in the code.

Recommendations For versions prior to 10.1 Build 132.8, update to Build 132.8 or later. For versions 10.5 prior to Build 57.7, update to Build 57.7 or later. For versions 10.5e prior to Build 56.1505.e, update to Build 56.1505.e or later. As a temporary workaround, consider restricting access to the CLI and UI components to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00263

CVE-2015-5538

Affected Products

Citrix Netscaler Application Delivery Controller

Citrix Netscaler Gateway

References · 4

• https://bdu.fstec.ru/vul/2016-00263 · Security Note
• http://support.citrix.com/article/CTX201334 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5538 · Security Note
• http://securitytracker.com/id/1033618 · Note