CVE-2018-6810

Опубликовано: 06 мар. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request.

Ссылки

http://www.securitytracker.com/id/1040440
Third Party Advisory
VDB Entry
https://support.citrix.com/article/CTX232161
Vendor Advisory
http://www.securitytracker.com/id/1040440
Third Party Advisory
VDB Entry
https://support.citrix.com/article/CTX232161
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:citrix:netscaler_gateway_firmware:10.5:*:*:*:*:*:*:*

cpe:2.3:o:citrix:netscaler_gateway_firmware:11.0:*:*:*:*:*:*:*

cpe:2.3:o:citrix:netscaler_gateway_firmware:11.1:*:*:*:*:*:*:*

cpe:2.3:o:citrix:netscaler_gateway_firmware:12.0:*:*:*:*:*:*:*

cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:10.5:*:*:*:*:*:*:*

cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.0:*:*:*:*:*:*:*

cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:11.1:*:*:*:*:*:*:*

cpe:2.3:o:citrix:netscaler_application_delivery_controller_firmware:12.0:*:*:*:*:*:*:*

cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04751

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-5jrp-g377-9qh6