Design/Logic Flaw

2015-11-1715:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.4%

JSON

The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache.

CPENameOperatorVersion
netscaler_application_delivery_controller_firmwareeq10.5
netscaler_application_delivery_controller_firmwareeq10.1
netscaler_gateway_firmwareeq10.1
netscaler_gateway_firmwareeq10.5
netscaler_service_delivery_appliance_service_vmeq10.5.101

Name	Operator	Version
netscaler_application_delivery_controller_firmware	eq	10.5
netscaler_application_delivery_controller_firmware	eq	10.1
netscaler_gateway_firmware	eq	10.1
netscaler_gateway_firmware	eq	10.5
netscaler_service_delivery_appliance_service_vm	eq	10.5.101

References

support.citrix.com/article/CTX202482

www.securitytracker.com/id/1034167