Code injection

2015-07-1614:59:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.2%

JSON

The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.

CPENameOperatorVersion
netscaler_application_delivery_controller_firmwareeq10.1.123
netscaler_application_delivery_controller_firmwareeq10.1.122
netscaler_application_delivery_controller_firmwareeq10.5.101
netscaler_application_delivery_controller_firmwareeq10.1.125
netscaler_application_delivery_controller_firmwareeq10.1.129
netscaler_application_delivery_controller_firmwareeq10.1.1201316101
netscaler_application_delivery_controller_firmwareeq10.1.126
netscaler_application_delivery_controller_firmwareeq10.5
netscaler_application_delivery_controller_firmwareeq10.1.128
netscaler_application_delivery_controller_firmwareeq10.1.127

Name	Operator	Version
netscaler_application_delivery_controller_firmware	eq	10.1.123
netscaler_application_delivery_controller_firmware	eq	10.1.122
netscaler_application_delivery_controller_firmware	eq	10.5.101
netscaler_application_delivery_controller_firmware	eq	10.1.125
netscaler_application_delivery_controller_firmware	eq	10.1.129
netscaler_application_delivery_controller_firmware	eq	10.1.1201316101
netscaler_application_delivery_controller_firmware	eq	10.1.126
netscaler_application_delivery_controller_firmware	eq	10.5
netscaler_application_delivery_controller_firmware	eq	10.1.128
netscaler_application_delivery_controller_firmware	eq	10.1.127