CVE-2015-7998: Infoleak
First published: Tue Nov 17 2015(Updated: )
The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allows attackers to obtain sensitive information via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix NetScaler Service Delivery Appliance | =10.5e | |
| Citrix Netscaler Gateway Firmware | =10.1 | |
| Citrix Netscaler Gateway Firmware | =10.5 | |
| Citrix Application Delivery Controller Firmware | =10.1 | |
| Citrix Application Delivery Controller Firmware | =10.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2015-7998?
CVE-2015-7998 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2015-7998?
To remediate CVE-2015-7998, upgrade to Citrix NetScaler ADC and Gateway versions 10.1 Build 133.9, 10.5 Build 58.11, or 10.5.e Build 56.1505.e.
What affects Citrix versions in CVE-2015-7998?
CVE-2015-7998 impacts Citrix NetScaler Application Delivery Controller and Gateway firmware versions prior to the specified builds.
What type of attack does CVE-2015-7998 enable?
CVE-2015-7998 allows attackers to obtain sensitive information from the administration UI of affected Citrix products.
Is CVE-2015-7998 present in Citrix NetScaler Service Delivery Appliance?
Yes, CVE-2015-7998 can be found in Citrix NetScaler Service Delivery Appliance devices running vulnerable firmware versions.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/citrix
- canonical/citrix netscaler service delivery appliance
- version/citrix netscaler service delivery appliance/10.5e
- canonical/citrix netscaler gateway firmware
- version/citrix netscaler gateway firmware/10.1
- version/citrix netscaler gateway firmware/10.5
- canonical/citrix application delivery controller firmware
- version/citrix application delivery controller firmware/10.1
- version/citrix application delivery controller firmware/10.5