CVE-2013-6942: CSRF

Published Mar 10, 2014

Updated

Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected Software

4 affected components

Citrix Netscaler Application Delivery Controller Firmware=9.3\(1\)

Citrix Netscaler Application Delivery Controller Firmware=9.3.e

Citrix Netscaler Application Delivery Controller Firmware=10.0

Citrix Netscaler Application Delivery Controller Firmware=10.1

Event History

Mar 10, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Mar 11, 2014

Data Sourced

via NVD·01:00 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6942?

CVE-2013-6942 is rated as a medium severity vulnerability due to its potential for cross-site request forgery (CSRF) attacks.

How do I fix CVE-2013-6942?

To mitigate CVE-2013-6942, update Citrix NetScaler to version 9.3-64.4, 10.0-77.5, or 10.1-118.7 or later.

What systems are affected by CVE-2013-6942?

CVE-2013-6942 affects Citrix NetScaler Application Delivery Controller firmware versions 9.3.x, 10.0, and 10.1 prior to their respective patched versions.

What type of attack does CVE-2013-6942 enable?

CVE-2013-6942 enables remote attackers to hijack user authentication through cross-site request forgery.

Is CVE-2013-6942 publicly known?

Yes, CVE-2013-6942 has been publicly disclosed and documented, making it important for affected users to apply necessary updates.