{"id": "CVE-2015-2683", "bulletinFamily": "NVD", "title": "CVE-2015-2683", "description": "Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic.", "published": "2015-03-26T14:59:00", "modified": "2018-10-09T19:56:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2683", "reporter": "cve@mitre.org", "references": ["http://packetstormsecurity.com/files/130930/Citrx-Command-Center-Advent-JMX-Servlet-Accessible.html", "http://seclists.org/fulldisclosure/2015/Mar/127", "https://www.securify.nl/advisory/SFY20140804/advent_jmx_servlet_of_citrx_command_center_is_accessible_to_unauthenticated_users.html", "http://www.securityfocus.com/bid/73313", "http://support.citrix.com/article/CTX200584", "http://www.securitytracker.com/id/1031993", "http://www.securityfocus.com/archive/1/534933/100/0/threaded"], "cvelist": ["CVE-2015-2683"], "type": "cve", "lastseen": "2019-05-29T18:14:41", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "758d07356bb8e57ec0ccceb233e6e251"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "54c43a4d7b690a6c46668b456ad728a4"}, {"key": "cpe23", "hash": "a2257e72811568b0aee7a24289aec07d"}, {"key": "cvelist", "hash": "9c23902eefcac3a69bebbe1afcc2de9d"}, {"key": "cvss", "hash": "0b053db5674b87efff89989a8a720df3"}, {"key": "cvss2", "hash": "c0820200430b694edad965274403e815"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "fa12e087f68642fcaefafba0d4583885"}, {"key": "description", "hash": "9f61e73c5b12b03b374f2e34dcf6d8d4"}, {"key": "href", "hash": "3e093dd517621059d720a9d4ad124e4e"}, {"key": "modified", "hash": "be68a0821148566322ba7f296bef53c7"}, {"key": "published", "hash": "d323c0316ea5a685c0c3e3c04a6d166b"}, {"key": "references", "hash": "50e9e2a41a1409b731334bc569669781"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "ce56dba5efeb9db3494ceb5bc0ecb619"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "ea91c1d7d1664434cb08b4e764fbf36d0599afb77648784231472c61d3cd7cc1", "viewCount": 0, "enchantments": {"score": {"value": 8.0, "vector": "NONE", "modified": "2019-05-29T18:14:41"}, "dependencies": {"references": [{"type": "kaspersky", "idList": ["KLA10522"]}], "modified": "2019-05-29T18:14:41"}, "vulnersScore": 8.0}, "objectVersion": "1.3", "cpe": ["cpe:/a:citrix:command_center:5.1", "cpe:/a:citrix:command_center:5.2"], "affectedSoftware": [{"name": "citrix command_center", "operator": "eq", "version": "5.2"}, {"name": "citrix command_center", "operator": "eq", "version": "5.1"}], "cvss2": {"acInsufInfo": true, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:citrix:command_center:5.2:*:*:*:*:*:*:*", "cpe:2.3:a:citrix:command_center:5.1:*:*:*:*:*:*:*"], "cwe": ["CWE-264"]}

{"kaspersky": [{"lastseen": "2019-03-21T00:14:10", "bulletinFamily": "info", "description": "### *Detect date*:\n03/26/2015\n\n### *Severity*:\nCritical\n\n### *Description*:\nMultiple serious vulnerabilities have been found in Citrix Controle Center. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.\n\n### *Affected products*:\nCitrix Command Center 5.1 versions earlier than Build 35.4 \nCitrix Command Center 5.2 versions earlier than Build 42.7\n\n### *Solution*:\nUpdate to the latest version\n\n### *Original advisories*:\n[Citrix bulletin](<http://support.citrix.com/article/CTX200584>) \n\n\n### *Impacts*:\nACE \n\n### *Related products*:\n[Citrix Command Center](<https://threats.kaspersky.com/en/product/Citrix-Command-Center/>)\n\n### *CVE-IDS*:\n[CVE-2015-2683](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2683>)7.5Critical \n[CVE-2015-2682](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2682>)5.0Critical", "modified": "2019-03-07T00:00:00", "published": "2015-03-26T00:00:00", "id": "KLA10522", "href": "https://threats.kaspersky.com/en/vulnerability/KLA10522", "title": "\r KLA10522Multiple vulnerabilities in Citrix CC ", "type": "kaspersky", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}