imPC@ndo IT

Tracker / CVE-2015-7996

CVE-2015-7996

Medium 5.0

The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache.

Affected products and versions

citrix netscaler_application_delivery_controller_firmware
citrix netscaler_gateway_firmware
citrix netscaler_service_delivery_appliance_service_vm

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References