CVE-2015-2683

Currently unrated

Key Information:

Vendor
Citrix
Status
Command Center
Vendor
CVE Published:
26 March 2015

Summary

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic.

References

http://www.securityfocus.com/archive/1/534933/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/73313
vdb-entryx_refsource_BID
http://packetstormsecurity.com/files/130930/Citrx-Command...
x_refsource_MISC

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.