PT-2018-17756

Name of the Vulnerable Software and Affected Versions NetScaler ADC versions 10.5 through 12.0 NetScaler Gateway versions 10.5 through 12.0 Description A directory traversal issue allows remote attackers to traverse the directory on the target system via a crafted request. Recommendations For...

CVE-2018-6808: Exposure of Sensitive Information to an Unauthorized Actor

NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system...

PT-2018-17755

Name of the Vulnerable Software and Affected Versions NetScaler ADC versions 10.5 through 12.0 NetScaler Gateway versions 10.5 through 12.0 Description The issue allows remote attackers to download arbitrary files on the target system. Recommendations For NetScaler ADC versions 10.5 through 12.0,...

CVE-2018-6810: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request...

CVE-2018-6811: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface...

CVE-2018-6809: Undefined Security Weakness

NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system...

NetScaler SD-WAN DHCP Address Not Renewed After ISP Router Changed

NetScaler SD-WAN is configured with the ISP router as DHCP server. After replacing the ISP Router, NetScaler SD-WAN appliance does not renew the IP address from the new ISP router. The IP address is renewed automatically after some time, may be after few days in some cases...

Command Injection Vulnerability in Multiple Citrix Products

Citrix NetScaler Application Delivery Controller and others are products of Citrix Systems, Inc.Citrix NetScaler Application Delivery Controller ADC. NetScaler ADC is a suite of service and application delivery solutions Application Delivery Controller; NetScaler Gateway is a secure remote access...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Path Traversal Vulnerability

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly known as Citrix Access Gateway Enterprise Edition are both products of Citrix Systems. NetScaler ADC is a service and application delivery solution Application Delivery Controller; NetScaler Gateway is a secure...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Cross-Site Scripting Vulnerabilities

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly known as Citrix Access Gateway Enterprise Edition are both products of Citrix Systems. NetScaler ADC is a service and application delivery solution Application Delivery Controller; NetScaler Gateway is a secure...

CVE-2018-5314

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition...

Command injection

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition...

CVE-2018-5314

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition...

CVE-2018-5314

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition...

CVE-2018-5314

CVE-2018-5314 affects Citrix NetScaler ADC and NetScaler Gateway (11.0/11.1/12.0) and the NetScaler LB instance in SD-WAN/CloudBridge 9.3.0, allowing a remote attacker to execute system commands or read files via an SSH login prompt. Affected versions and fixes are documented in Citrix advisories...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Security Updates

Description of Problem A number of vulnerabilities have been identified in supported versions of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway. The following vulnerabilities have been addressed: CVE-2018-6810: Citrix NetScaler Application Delivery Controller ADC and...

PT-2018-16891

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway versions 11.0 before build 70.16 Citrix NetScaler ADC and NetScaler Gateway versions 11.1 before build 55.13 Citrix NetScaler ADC and NetScaler Gateway versions 12.0 before build 53.13 NetScaler Load...

CVE-2018-5314: Improper Authentication

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition...

PT-2018-1111

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller versions 10.5 through 12.0 Citrix NetScaler Gateway versions 10.5 through 12.0 Description The issue is related to insufficient access control in the software, which can be exploited by a remote...

CVE-2018-5314 - Authentication Bypass Vulnerability in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway

Description of Problem A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that, if exploited, could allow an unauthenticated attacker with access to the NetScaler management interface to bypass authenticati...