CVE-2015-7996 Information disclosure in n/a
Attackers can obtain credentials via browser cache in Citrix NetScaler ADC and Gateway, requiring user interaction to exploit.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2015-7996?
CVE-2015-7996 is a medium-severity vulnerability in n/a, published on 17 Nov 2015. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache.
Weakness: CWE-200
Which versions are affected by CVE-2015-7996?
It affects 3 products.
Products include Citrix Netscaler Application Delivery Controller Firmware, Citrix Netscaler Gateway Firmware, Citrix Netscaler Service Delivery Appliance Service Vm.
How do I fix CVE-2015-7996?
No fix has been published for CVE-2015-7996 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-7996 being exploited?
There is no known exploitation of CVE-2015-7996 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-25w8-v4rh-3fg2.