What is the severity of CVE-2016-9028?

CVE-2016-9028 has a high severity rating as it allows remote attackers to steal session cookies, leading to unauthorized access.

How do I fix CVE-2016-9028?

To fix CVE-2016-9028, upgrade Citrix NetScaler ADC to the recommended versions or later as specified by the vendor's advisory.

Which versions of Citrix NetScaler ADC are affected by CVE-2016-9028?

CVE-2016-9028 affects Citrix NetScaler ADC versions before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F, and 11.1 47.14.

What type of attack does CVE-2016-9028 enable?

CVE-2016-9028 enables an unauthorized redirect attack which can lead to session cookie theft for legitimate users.

What are the potential consequences of CVE-2016-9028?

The consequences of CVE-2016-9028 include unauthorized access to sensitive information and user sessions, which can compromise user accounts.

Vulnerability/
CVE-2016-9028

high

8.8

CWE

254

28/10/2016

6/8/2024

CVE-2016-9028

First published: Fri Oct 28 2016(Updated: )

Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Citrix Application Delivery Controller Firmware	<=10.1
Citrix Application Delivery Controller Firmware	=10.5
Citrix Application Delivery Controller Firmware	=11.0
Citrix Application Delivery Controller Firmware	=11.1
NetScaler ADC

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-9028?
CVE-2016-9028 has a high severity rating as it allows remote attackers to steal session cookies, leading to unauthorized access.
How do I fix CVE-2016-9028?
To fix CVE-2016-9028, upgrade Citrix NetScaler ADC to the recommended versions or later as specified by the vendor's advisory.
Which versions of Citrix NetScaler ADC are affected by CVE-2016-9028?
CVE-2016-9028 affects Citrix NetScaler ADC versions before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F, and 11.1 47.14.
What type of attack does CVE-2016-9028 enable?
CVE-2016-9028 enables an unauthorized redirect attack which can lead to session cookie theft for legitimate users.
What are the potential consequences of CVE-2016-9028?
The consequences of CVE-2016-9028 include unauthorized access to sensitive information and user sessions, which can compromise user accounts.

agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/references
agent/last-modified-date
agent/author
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/citrix
canonical/citrix application delivery controller firmware
version/citrix application delivery controller firmware/10.1
version/citrix application delivery controller firmware/10.5
version/citrix application delivery controller firmware/11.0
version/citrix application delivery controller firmware/11.1
canonical/netscaler adc

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.