CVE-2015-2838

Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication…

published April 3, 2015

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands as nsroot via shell metacharacters in the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02859 · 86.6th percentile
Published
2015-04-03T14:00Z
EPSS history
Timeline
  • 03 APR 14:00Z
    Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication…
    cvelistv5