42 matches found
citrix_adc_netscaler_lfi
citrixadcnetscalerlfiscan !alt textcitrix 이 Metasploit-Framework 모듈은 기업이 최신 Citrix 취약점2020년 7월 8일 공개을 점검하는 데 도움을 주기 위해 사용될 수 있습니다. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Donny Maasland는 2020년 7월 8일 공개 보고서에서 취약점이 어떻게 악용될 수 있는지 논의했습니다. 2020년 7월 10일 기준으로, RIFT는 이 취약점을 사용하여 취약한 인스턴스에서 유효한 VPN 세션을...
CitrixADC-CVE-2020-8300
Citrix ADC NITRO APIを使用して、CVE-2020-8300に対して脆弱なCitrix ADC SAMLアクションまたはSAML iDPプロファイル設定を検出する 使用例 & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" これが誰かの役に立つなら、次の機能を追加してさらに開発します： SAMLアクションとSAML iDPプロファイルのバインディングを特定し、使用されているかどうか、どこで使用されているかを確認...
EUVD-2021-10082
Malware in sbrugna...
EUVD-2015-2927
Malware in sbrugna...
EUVD-2021-10081
Malware in sbrugna...
EUVD-2015-2926
Malware in sbrugna...
EUVD-2015-7892
Malware in sbrugna...
[Netscaler] Nitro API: Intermittent Incomplete /nitro/v1/config/rnat Responses
You might observe less data than expected in the response from NetScaler when calling the Nitro API /nitro/v1/config/rnat under the following conditions: NetScaler versions before 13.1 Build 53.24 NetScaler versions before 14.1 Build 21.57 Simultaneous 'show' calls are made from different session...
Citrix NetScaler Automated backup job is failing after recent upgrade.
After upgrading to NetScaler firmware 13.1.56.x or later , attempts to download backup files using the Nitro API may fail. Customers using automation tools such as Ansible , Postman , or custom scripts may receive the following error when downloading files through the systemfile endpoint: Main...
How To: Nitro API Authentication for RADIUS Access-Challenge Response
When NITRO API is used to manage or get information from a NetScaler, a session must be authenticated first. Depending on the authentication factors configured for NetScaler Management, different NITRO API resources should be used. If one of the authentication factors used, responds with a...
NITRO API commands not working, request times out.
NITRO API endpoint is not working, the requests sent to the NSIP timeout without a response...
CVE-2021-22955
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22956
An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22956
An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
Design/Logic Flaw
An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
Denial of service
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22955
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22956: Uncontrolled Resource Consumption
An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
CVE-2021-22955: Uncontrolled Resource Consumption
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
