Arbitrary Command Execution Vulnerability in Citrix NetScaler Product
CVE-2015-5080

Currently unrated

Key Information:

Vendor: Citrix
Status: Netscaler Application Delivery Controller Firmware; Netscaler Gateway Firmware
Vendor: CVE Published:; 16 July 2015

Summary

The Management Interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway is vulnerable, allowing remote authenticated users to execute arbitrary shell commands. This is possible through the misuse of shell metacharacters in the filter parameter to the rapi/ipsec_logs endpoint. This vulnerability presents a significant risk, as it can be exploited to gain unauthorized access and control over the affected systems.

References

http://security-assessment.com/files/documents/advisory/C...

x_refsource_MISC

http://support.citrix.com/article/CTX201149

x_refsource_CONFIRM

http://www.securitytracker.com/id/1032762

vdb-entryx_refsource_SECTRACK

Timeline

Vulnerability published
Jul 16, 2015
Vulnerability Reserved
Jun 26, 2015