NetSight
medium5.0

CVE-2015-7996

The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e befo…

Impact

The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache.

Affected products

VendorProductAffected versions
CitrixNetscaler Application Delivery Controller Firmware
Versions 10.1, 10.5
CitrixNetscaler Service Delivery Appliance Service Vm
Version 10.5e
CitrixNetscaler Gateway Firmware
Versions 10.1, 10.5

Weakness classification

References