CVE-2016-2072 - The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetSc

CVE-2016-2072

Summary

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

References

Vulnerable Configurations

cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*
cpe:2.3:h:citrix:netscaler_application_delivery_controller:-:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler:10.1:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler:10.1:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler:10.5:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler:10.5e:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler:10.5e:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler:11.0:*:*:*:*:*:*:*
cpe:2.3:a:citrix:netscaler:11.0:*:*:*:*:*:*:*
cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*
cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 03-12-2016 - 03:24)
Impact:
Exploitability:

CWE

CWE-254

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

confirm	http://support.citrix.com/article/CTX206001
sectrack	1035098

Last major update

03-12-2016 - 03:24

Published

17-02-2016 - 15:59

Last modified

03-12-2016 - 03:24