Session fixation

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...

PT-2017-16768

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway versions 10.5 before Build 65.11 Citrix NetScaler ADC and NetScaler Gateway versions 11.0 before Build 69.12/69.123 Citrix NetScaler ADC and NetScaler Gateway versions 11.1 before Build 51.21...

CVE-2017-5933: Exposure of Sensitive Information to an Unauthorized Actor

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...

CVE-2017-5933 - Vulnerability in Citrix NetScaler Application Delivery Controller and NetScaler Gateway GCM nonce generation

Description of Problem A flaw in NetScaler ADC and Gateway causes GCM nonces to be randomly generated, making it marginally easier for remote attackers to obtain the GCM authentication key and spoof data within a session. The following vulnerability has been addressed: CVE-2017-5933: Vulnerabilit...

Citrix NetScaler ADC URL Redirection Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery. A URL redirection vulnerability exists in Citrix NetScaler ADC. An attacker could exploit this vulnerability to allow users to access the attacker's malicious links without notice...

CVE-2016-9028

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

CVE-2016-9028

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

Design/Logic Flaw

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

CVE-2016-9028

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

PT-2016-7623

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC versions prior to 10.1 135.8 Citrix NetScaler ADC versions prior to 10.5 61.11 Citrix NetScaler ADC versions prior to 11.0 65.31/65.35F Citrix NetScaler ADC versions prior to 11.1 47.14 Description The issue allows a remot...

Citrix NetScaler ADC Unauthorized Redirect Vulnerability (CTX218361)

An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC that could allow a remote attacker to obtain session cookies of a redirected AAA user. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

CVE-2016-9028: Undefined Security Weakness

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...

How To Configure Single Sign-on for Receiver for ChromeOS

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver for Chrome now supports single sign-on SSON on Chromebook devices and Citrix Virtual...

The vulnerability of the delivery method for Citrix NetScaler web applications, which allows attackers to enhance their privileges.

The vulnerability of the Citrix NetScaler web application delivery mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges using NS commands, Web interfaces, or graphical user interfaces...

Citrix NetScaler Service Delivery Appliance Multiple Security Updates (CTX206006)

A number of vulnerabilities have been identified in the Citrix NetScaler Service Delivery Appliance SDX that could allow a malicious administrative user to crash the host or other VMs and execute arbitrary code on the SDX host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions migh...

Identify Web Application Firewall: WAFW00F

WAFW00F Fingerprints and Identify Web Application Firewall WAF products WAFW00F is a Python tool to help you fingerprint and identify Web Application Firewall WAF products. It is an active reconnaissance tool as it actually connects to the web server, but it starts out with a normal HTTP response...

WAFW00F - Identifies and Fingerprints Web Application Firewall (WAF) Products

WAFW00F allows one to identify and fingerprint Web Application Firewall WAF products protecting a website. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions If that is not successful, it...

CVE-2016-4945

Cross-site scripting XSS vulnerability in vpn/js/gatewayloginformview.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSCTMAC cookie...

CVE-2016-4945

Cross-site scripting XSS vulnerability in vpn/js/gatewayloginformview.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSCTMAC cookie...

Cross site scripting

Cross-site scripting XSS vulnerability in vpn/js/gatewayloginformview.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSCTMAC cookie...