CVE-2015-7998: Infoleak

Published Nov 17, 2015

Updated

The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allows attackers to obtain sensitive information via unspecified vectors.

Affected Software

5 affected components

Citrix NetScaler Service Delivery Appliance Service VM=10.5e

Citrix Netscaler Gateway Firmware=10.1

Citrix Netscaler Gateway Firmware=10.5

Citrix Netscaler Application Delivery Controller Firmware=10.1

Citrix Netscaler Application Delivery Controller Firmware=10.5

Remediation

Patch Available

http://support.citrix.com/article/CTX202482

Event History

Nov 17, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7998?

CVE-2015-7998 is classified as a medium severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2015-7998?

To remediate CVE-2015-7998, upgrade to Citrix NetScaler ADC and Gateway versions 10.1 Build 133.9, 10.5 Build 58.11, or 10.5.e Build 56.1505.e.

What affects Citrix versions in CVE-2015-7998?

CVE-2015-7998 impacts Citrix NetScaler Application Delivery Controller and Gateway firmware versions prior to the specified builds.

What type of attack does CVE-2015-7998 enable?

CVE-2015-7998 allows attackers to obtain sensitive information from the administration UI of affected Citrix products.

Is CVE-2015-7998 present in Citrix NetScaler Service Delivery Appliance?

Yes, CVE-2015-7998 can be found in Citrix NetScaler Service Delivery Appliance devices running vulnerable firmware versions.