CVE-2018-6186 | BDVDB-2026-95952 Detail

Description#

Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gist.github.com/buxu/04ce809eb8b32ef57e232eab5e61f023
https://support.citrix.com/article/CTX232161
http://www.securitytracker.com/id/1040440
http://www.securityfocus.com/bid/102915

Exploit#

No public exploit known

History#

Version 12018-02-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.