CVE-2017-14602

CVE-2017-14602 is an authentication-bypass flaw in the Citrix NetScaler ADC/NetScaler Gateway management interface. Affected versions include NetScaler ADC and Gateway 10.1 before 135.18, 10.5 before 66.9, 10.5e before 60.7010.e, 11.0 before 70.16, 11.1 before 55.13, and 12.0 before 53.13 (except...

CVE-2017-14602

A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53....

CVE-2017-14602 - Authentication Bypass Vulnerability in the Management Interface of Citrix NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition Appliances

Description of Problem A vulnerability has been identified in the management interface of the Citrix NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition appliances. This vulnerability, if exploited, could allow an attacker with access to the management interface of the...

How to Restrict NetScaler Management Interfaces with ACLs

This article describes how to lock down the NetScaler management interfaces with ACLs. Background Customers wanting to run a secure environment should limit access to the NetScaler management interface as a best practice. Ideally, the management interfaces should be on isolated networks physical ...

CVE-2017-14602: Improper Authentication

A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53....

CVE-2015-7293

Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...

PYSEC-2017-51

Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...

PYSEC-2017-51

Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...

CVE-2015-7293

The CVE concerns multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface (ZMI) 4.3.7 and earlier, and Plone before 5.x. The affected component is the ZMI/Plone web interfaces built on Zope, with the root cause being CSRF weaknesses that could allow unauthorized act...

CVE-2015-7293

Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...

CVE-2015-7293

Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...

PT-2017-7185

Name of the Vulnerable Software and Affected Versions Zope Management Interface versions 4.3.7 and earlier Plone versions prior to 5.x Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing...

CVE-2015-7293: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...

PT-2017-3004

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller versions 10.1 before build 135.18 Citrix NetScaler Application Delivery Controller versions 10.5 before build 66.9 Citrix NetScaler Application Delivery Controller versions 10.5e before build...

Foscam IP Video Camera CGIProxy.fcgi Account Password Command Injection Vulnerability(CVE-2017-2828)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during a password change resultin...

Foscam IP Video Camera CGIProxy.fcgi Account Creation Command Injection Vulnerability(CVE-2017-2827)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting...

Foscam IP Video Camera CGIProxy.fcgi SMTP Test Command Injection Vulnerability(CVE-2017-2845)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tes...

Cisco Firepower Management Center Multiple XSS

The version of Cisco Firepower Management Center installed on the remote host is equal or prior to 6.0.1.3. It is, therefore, affected by multiple cross-site scripting vulnerabilities: - A reflected cross-site scripting vulnerability in the web-based management interface due to improper validatio...

CVE-2017-12220: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...