CVE-2015-2682

Опубликовано: 26 мар. 2015

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.

Ссылки

http://packetstormsecurity.com/files/130928/Citrix-Command-Center-Configuration-Disclosure.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Mar/126
Mailing List
Third Party Advisory
http://support.citrix.com/article/CTX200584
Vendor Advisory
http://www.securityfocus.com/bid/73309
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031993
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/36441/
Third Party Advisory
VDB Entry
https://www.securify.nl/advisory/SFY20140802/citrix_command_center_allows_downloading_of_configuration_files.html
Exploit
http://packetstormsecurity.com/files/130928/Citrix-Command-Center-Configuration-Disclosure.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Mar/126
Mailing List
Third Party Advisory
http://support.citrix.com/article/CTX200584
Vendor Advisory
http://www.securityfocus.com/bid/73309
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031993
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/36441/
Third Party Advisory
VDB Entry
https://www.securify.nl/advisory/SFY20140802/citrix_command_center_allows_downloading_of_configuration_files.html
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:citrix:command_center:5.1:*:*:*:*:*:*:*

cpe:2.3:a:citrix:command_center:5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.3472

Средний

5 Medium

CVSS2

Дефекты

CWE-17

Связанные уязвимости

GHSA-gg63-37ff-2384

github

больше 3 лет назад