Remote File Download Vulnerability in NetScaler ADC and Gateway by Citrix
CVE-2018-6808

7.5HIGH

Key Information:

Vendor
Citrix
Status
Netscaler Application Delivery Controller Firmware
Vendor
CVE Published:
6 March 2018

Summary

Citrix NetScaler ADC and NetScaler Gateway are vulnerable to a security flaw that enables remote attackers to download arbitrary files from the target system. This vulnerability affects multiple versions of both products, potentially allowing unauthorized access to sensitive data and jeopardizing system integrity. Prompt patching and security measures are recommended to mitigate risks associated with this issue. For detailed guidance on securing your systems, refer to the official resources provided by Citrix.

References

https://support.citrix.com/article/CTX232161
x_refsource_CONFIRM
http://www.securitytracker.com/id/1040440
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.