CVE-2009-2213

The CVE-2009-2213 entry involves Citrix NetScaler Access Gateway (Enterprise Edition) firmware 9.0, 8.1 and earlier. The issue is a default Security global setting: Default Authorization Action is set to Allow, which may allow remote authenticated users to bypass intended access restrictions. The...

CVE-2009-2213

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access...

PT-2009-4662 · Citrix · Citrix Netscaler Access Gateway

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware versions 9.0, 8.1, and earlier Description: The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance specifies Allow...

NetScaler web management login

It is possible to log into the remote web management interface. Description : OpenVAS successfully logged into the remote Citrix NetScaler web management interface using the supplied credentials and stored the authentication cookie for later use. OpenVAS Vulnerability Test $Id:...

NetScaler web management XSS

The remote web server is prone to cross-site scripting attacks. Description : The remote Citrix NetScaler web management interface is susceptible to cross-site scripting attacks. OpenVAS Vulnerability Test $Id: netscalerwebxss.nasl 4489 2016-11-14 08:23:54Z teissa $ Description: NetScaler web...

Citrix NetScaler Web Management Login (HTTP)

The scanner successfully logged into the remote Citrix NetScaler web management interface using the supplied credentials and stored the authentication cookie for later use. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright...

NetScaler web management cookie information

It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

NetScaler Web Management 'CVE-2007-6037' XSS Vulnerability - Active Check

The remote Citrix NetScaler web management interface is susceptible to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

NetScaler web management cookie cipher weakness

The remote web server is prone to an information disclosure attack. Description : The version of the Citrix NetScaler web management interface on the remote host uses weak encryption for protecting the HTTP cookie content by XORing sensitive values, including the username and password, with a fix...

NetScaler web management cookie cipher weakness

The remote web server is prone to an information disclosure attack. Description : The version of the Citrix NetScaler web management interface on the remote host uses weak encryption for protecting the HTTP cookie content by XORing sensitive values, including the username and password, with a fix...

Unencrypted NetScaler Web Management Interface (HTTP)

The remote web management interface does not encrypt connections. Description : The remote Citrix NetScaler web management interface does use TLS or SSL to encrypt connections. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are...

Citrix NetScaler Detection (HTTP)

HTTP based detection of Citrix NetScaler. SPDX-FileCopyrightText: 2008 nnposter SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

NetScaler web management cookie information

The remote web server is prone to an information disclosure attack. Description : It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface's session cookie, including the appliance's main IP address and software version. OpenVAS...

Information disclosure

Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information...

NetScaler Web Management Interface Cookie Credentials Encryption Weakness

The version of the Citrix NetScaler web management interface on the remote host uses weak encryption for protecting the HTTP cookie content by XORing sensitive values, including the username and password, with a fixed key stream. %NASLMINLEVEL 70300 netscalerwebcookiecrypto.nasl GPLv2 History:...

NetScaler Unencrypted Web Management Interface

The remote Citrix NetScaler web management interface does not use TLS or SSL to encrypt connections. %NASLMINLEVEL 70300 netscalerwebunencrypted.nasl GPLv2 Changes by Tenable: - Revised plugin title 9/23/09 - Added CPE and updated copyright 10/18/2012 - Corrected encryption testing 1/2/2018 -...

NetScaler Web Management Interface IP Address Cookie Information Disclosure

It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface's session cookie, including the appliance's main IP address and software version. %NASLMINLEVEL 70300 netscalerwebcookieinfo.nasl GPLv2 History: 1.00, 11/21/07 - Initial...

NetScaler Web Management ws/generic_api_call.pl standalone Parameter XSS

The remote Citrix NetScaler web management interface is susceptible to cross-site scripting attacks. %NASLMINLEVEL 70300 netscalerwebxss.nasl GPLv2 History: 1.00, 11/21/07 - Initial release Changes by Tenable: - Revised plugin title 9/23/09 - Added CPE and updated copyright 10/18/2012...

NetScaler Web Management Successful Authentication

Nessus successfully logged into the remote Citrix NetScaler web management interface using the supplied credentials and stored the authentication cookie for later use. netscalerweblogin.nasl GPLv2 History: 1.00, 11/21/07 - Initial release Changes by Tenable: - Revised plugin title 9/23/09 - Added...

Citrix Application Delivery Controller (ADC) / Citrix NetScaler Detection

The remote host appears to be a Citrix ADC previously NetScaler, an appliance for web application delivery, and the remote web server is its management interface. netscalerwebdetect.nasl GPLv2 History: 1.00, 11/21/07 - Initial release Changes by Tenable: - Revised plugin title 9/23/09 - Added CPE...