CVE-2013-6943

2014-03-1113:00:00

CWE-94

[email protected]

web.nvd.nist.gov

citrix

netscaler

adc

ldap injection

cve-2013-6943

security vulnerability

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

57.3%

JSON

Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames.

CPENameOperatorVersion
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq9.3\(1\)
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq9.3.e
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq10.0
citrix:netscaler_application_delivery_controller_firmwarecitrix netscaler application delivery controller firmwareeq10.1

CPE	Name	Operator	Version
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	9.3\(1\)
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	9.3.e
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	10.0
citrix:netscaler_application_delivery_controller_firmware	citrix netscaler application delivery controller firmware	eq	10.1