CVE-2018-6186 — Server-Side Request Forgery in Citrix Netscaler

CWE-918 — Server-Side Request Forgery4 documents3 sources
Severity
8.8HIGHNVD
EPSS
1.3%
top 20.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Citrix NetscalerCitrix ADMCitrix Hypervisor+6 more
Timeline
PublishedFeb 1
Latest updateMay 14

Description

Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages9 packages

🔴Vulnerability Details

1
GHSA
GHSA-8jj3-gf74-g749: Citrix NetScaler VPX through NS12↗2022-05-14
▶

📋Vendor Advisories

2
Citrix
CVE-2018-6186: Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. T↗2018-02-01
▶
Citrix
Citrix Security Bulletin CTX232161↗
▶