cnvd - cnvd-2018-06560

cnvd-2018-06560

Vulnerability from cnvd

Title: Citrix NetScaler ADC和NetScaler Gateway任意文件下载漏洞

Description:

Citrix NetScaler Application Delivery Controller（ADC）和NetScaler Gateway（前称Citrix Access Gateway Enterprise Edition）都是美国思杰系统（Citrix Systems）公司的产品。NetScaler ADC是一套服务和应用交付解决方案（应用交付控制器）；NetScaler Gateway是一套安全的远程接入解决方案。

Citrix NetScaler ADC和NetScaler Gateway中存在安全漏洞。远程攻击者可利用该漏洞下载任意文件。

Severity: 中

Patch Name: Citrix NetScaler ADC和NetScaler Gateway任意文件下载漏洞的补丁

Patch Description:

Citrix NetScaler ADC和NetScaler Gateway中存在安全漏洞。远程攻击者可利用该漏洞下载任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布漏洞修复程序，请及时关注更新： https://support.citrix.com/article/CTX232161

Reference: https://support.citrix.com/article/CTX232161

Impacted products

Name
['Citrix Systems NetScaler Gateway 10.5', 'Citrix Systems NetScaler Gateway 11.0', 'Citrix Systems NetScaler Gateway 11.1', 'Citrix Systems NetScaler Gateway 12.0', 'Citrix Systems Citrix NetScaler ADC 10.5', 'Citrix Systems Citrix NetScaler ADC 11.0', 'Citrix Systems Citrix NetScaler ADC 11.1', 'Citrix Systems Citrix NetScaler ADC 12.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-6808"
    }
  },
  "description": "Citrix NetScaler Application Delivery Controller\uff08ADC\uff09\u548cNetScaler Gateway\uff08\u524d\u79f0Citrix Access Gateway Enterprise Edition\uff09\u90fd\u662f\u7f8e\u56fd\u601d\u6770\u7cfb\u7edf\uff08Citrix Systems\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002NetScaler ADC\u662f\u4e00\u5957\u670d\u52a1\u548c\u5e94\u7528\u4ea4\u4ed8\u89e3\u51b3\u65b9\u6848\uff08\u5e94\u7528\u4ea4\u4ed8\u63a7\u5236\u5668\uff09\uff1bNetScaler Gateway\u662f\u4e00\u5957\u5b89\u5168\u7684\u8fdc\u7a0b\u63a5\u5165\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nCitrix NetScaler ADC\u548cNetScaler Gateway\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4e0b\u8f7d\u4efb\u610f\u6587\u4ef6\u3002",
  "discovererName": "Qualys Security Research Team (https://www.qualys.com)",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.citrix.com/article/CTX232161",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-06560",
  "openTime": "2018-03-28",
  "patchDescription": "Citrix NetScaler Application Delivery Controller\uff08ADC\uff09\u548cNetScaler Gateway\uff08\u524d\u79f0Citrix Access Gateway Enterprise Edition\uff09\u90fd\u662f\u7f8e\u56fd\u601d\u6770\u7cfb\u7edf\uff08Citrix Systems\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002NetScaler ADC\u662f\u4e00\u5957\u670d\u52a1\u548c\u5e94\u7528\u4ea4\u4ed8\u89e3\u51b3\u65b9\u6848\uff08\u5e94\u7528\u4ea4\u4ed8\u63a7\u5236\u5668\uff09\uff1bNetScaler Gateway\u662f\u4e00\u5957\u5b89\u5168\u7684\u8fdc\u7a0b\u63a5\u5165\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nCitrix NetScaler ADC\u548cNetScaler Gateway\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4e0b\u8f7d\u4efb\u610f\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Citrix NetScaler ADC\u548cNetScaler Gateway\u4efb\u610f\u6587\u4ef6\u4e0b\u8f7d\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Citrix Systems NetScaler Gateway 10.5",
      "Citrix Systems NetScaler Gateway 11.0",
      "Citrix Systems NetScaler Gateway 11.1",
      "Citrix Systems NetScaler Gateway 12.0",
      "Citrix Systems Citrix NetScaler ADC 10.5",
      "Citrix Systems Citrix NetScaler ADC 11.0",
      "Citrix Systems Citrix NetScaler ADC 11.1",
      "Citrix Systems Citrix NetScaler ADC 12.0"
    ]
  },
  "referenceLink": "https://support.citrix.com/article/CTX232161",
  "serverity": "\u4e2d",
  "submitTime": "2018-03-07",
  "title": "Citrix NetScaler ADC\u548cNetScaler Gateway\u4efb\u610f\u6587\u4ef6\u4e0b\u8f7d\u6f0f\u6d1e"
}

CVE-2018-6808 (GCVE-0-2018-6808)

Vulnerability from cvelistv5

Published

2018-03-06 20:00

Modified

2024-08-05 06:10

Severity ?

CWE

Summary

NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system.

References

▼	URL	Tags
	https://support.citrix.com/article/CTX232161	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1040440	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:10:11.369Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX232161"
          },
          {
            "name": "1040440",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-03-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-06T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX232161"
        },
        {
          "name": "1040440",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040440"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-6808",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.citrix.com/article/CTX232161",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX232161"
            },
            {
              "name": "1040440",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040440"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-6808",
    "datePublished": "2018-03-06T20:00:00",
    "dateReserved": "2018-02-07T00:00:00",
    "dateUpdated": "2024-08-05T06:10:11.369Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted