Lucene search

K
cve[email protected]CVE-2015-5080
HistoryJul 16, 2015 - 2:59 p.m.

CVE-2015-5080

2015-07-1614:59:05
CWE-77
web.nvd.nist.gov
26
citrix
netscaler
adc
gateway
cve-2015-5080
remote execution
security vulnerability
nvd

7.5 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

66.1%

The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.

Affected configurations

NVD
Node
citrixnetscaler_application_delivery_controller_firmwareMatch10.1
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.120.1316.e
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.121
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.122
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.123
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.124
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.125
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.126
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.127
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.128
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.1.129
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.5
OR
citrixnetscaler_application_delivery_controller_firmwareMatch10.5e
OR
citrixnetscaler_gateway_firmwareMatch10.1.120.1316.e
OR
citrixnetscaler_gateway_firmwareMatch10.1.121
OR
citrixnetscaler_gateway_firmwareMatch10.1.122
OR
citrixnetscaler_gateway_firmwareMatch10.1.123
OR
citrixnetscaler_gateway_firmwareMatch10.1.124
OR
citrixnetscaler_gateway_firmwareMatch10.1.125
OR
citrixnetscaler_gateway_firmwareMatch10.1.126
OR
citrixnetscaler_gateway_firmwareMatch10.1.127
OR
citrixnetscaler_gateway_firmwareMatch10.1.128
OR
citrixnetscaler_gateway_firmwareMatch10.1.129
OR
citrixnetscaler_gateway_firmwareMatch10.5
OR
citrixnetscaler_gateway_firmwareMatch10.5.50.10
OR
citrixnetscaler_gateway_firmwareMatch10.5.51.10
OR
citrixnetscaler_gateway_firmwareMatch10.5e

7.5 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

66.1%

Related for CVE-2015-5080