PT-2018-17755 · Citrix · Netscaler Adc+1

Published 2018-03-06 · Updated 2018-03-26 · CVE-2018-6808

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetScaler ADC versions 10.5 through 12.0 NetScaler Gateway versions 10.5 through 12.0

Description The issue allows remote attackers to download arbitrary files on the target system.

Recommendations For NetScaler ADC versions 10.5 through 12.0, update to a version that contains a fix for this issue. For NetScaler Gateway versions 10.5 through 12.0, update to a version that contains a fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-6808

Affected Products

Netscaler Adc

Netscaler Gateway

References · 4

• https://support.citrix.com/article/CTX232161 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-6808 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6808 · Security Note
• http://securitytracker.com/id/1040440 · Note