CVE-2015-5538

Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the (1) Command Line Interface (CLI) and the (2) Web User Interface (UI).

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://support.citrix.com/article/CTX201334	Vendor Advisory
http://www.securitytracker.com/id/1033618
http://support.citrix.com/article/CTX201334	Vendor Advisory
http://www.securitytracker.com/id/1033618

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:::::::*
	cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:::::::*
	cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5e:::::::*
	cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:::::::*
	cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:::::::*
	cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:::::::*

History

21 Nov 2024, 02:33

Type	Values Removed	Values Added
References	~~() http://support.citrix.com/article/CTX201334 - Vendor Advisory~~	() http://support.citrix.com/article/CTX201334 - Vendor Advisory
References	~~() http://www.securitytracker.com/id/1033618 -~~	() http://www.securitytracker.com/id/1033618 -

Information

Published : 2015-09-17 16:59

Updated : 2024-11-21 02:33

NVD link : CVE-2015-5538

Mitre link : CVE-2015-5538

CVE.ORG link : CVE-2015-5538

JSON object : View

Products Affected

citrix

netscaler_application_delivery_controller_firmware
netscaler_gateway_firmware

CWE

NVD-CWE-noinfo

{"id": "CVE-2015-5538", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-09-17T16:59:02.730", "references": [{"url": "http://support.citrix.com/article/CTX201334", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1033618", "source": "cve@mitre.org"}, {"url": "http://support.citrix.com/article/CTX201334", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1033618", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allow remote attackers to gain privileges via unknown vectors, related to the (1) Command Line Interface (CLI) and the (2) Web User Interface (UI)."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades no especificadas en Citrix NetScaler Application Delivery Controller (ADC) y NetScaler Gateway en versiones anteriores a 10.1 Build 132.8, 10.5 en versiones anteriores a Build 57.7 y 10.5e en versiones anteriores a Build 56.1505.e, permite a atacantes remotos obtener privilegios a trav\u00e9s de vectores no especificados, relacionado con la (1) Command Line Interface (CLI) y (2) Web User Interface (UI)."}], "lastModified": "2024-11-21T02:33:13.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD151FA3-8B96-48AF-B908-C29EAE88EF5B"}, {"criteria": "cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8C7525B-2A2D-43AF-8DA0-11FF28322337"}, {"criteria": "cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5e:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EE0A709-2C34-495C-85F1-9DEE8DD58BE7"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A254925E-AD47-4722-AAB2-43A6FEA900AC"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E0FA8E2-3E8F-481E-8C39-FB00A9739DFC"}, {"criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5e:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C6A8316-7943-4951-8FB7-A14D0FAB8F3E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}