CVE-2013-6943

2014-03-1113:00:36

CWE-94

mitre

web.nvd.nist.gov

citrix

netscaler

adc

ldap injection

cve-2013-6943

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.002

Percentile

55.1%

JSON

Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames.

Affected configurations

Nvd

Node

citrixnetscaler_application_delivery_controller_firmwareMatch9.3\(1\)

citrixnetscaler_application_delivery_controller_firmwareMatch9.3.e

citrixnetscaler_application_delivery_controller_firmwareMatch10.0

citrixnetscaler_application_delivery_controller_firmwareMatch10.1

VendorProductVersionCPE
citrixnetscaler_application_delivery_controller_firmware9.3(1)cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\(1\):*:*:*:*:*:*:*
citrixnetscaler_application_delivery_controller_firmware9.3.ecpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:*:*:*:*:*:*:*
citrixnetscaler_application_delivery_controller_firmware10.0cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:*:*:*:*:*:*:*
citrixnetscaler_application_delivery_controller_firmware10.1cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	netscaler_application_delivery_controller_firmware	9.3(1)	cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3\(1\):::::::*
citrix	netscaler_application_delivery_controller_firmware	9.3.e	cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:9.3.e:::::::*
citrix	netscaler_application_delivery_controller_firmware	10.0	cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.0:::::::*
citrix	netscaler_application_delivery_controller_firmware	10.1	cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:::::::*