CVE-2015-7998 Information disclosure in n/a
Attackers can obtain sensitive information from the Citrix NetScaler administration UI via unspecified vectors.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2015-7998?
CVE-2015-7998 is a medium-severity vulnerability in n/a, published on 17 Nov 2015. It can be exploited over the network.
Official description
The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allows attackers to obtain sensitive information via unspecified vectors.
Weakness: CWE-200
Which versions are affected by CVE-2015-7998?
It affects 3 products.
Products include Citrix Netscaler Application Delivery Controller Firmware, Citrix Netscaler Gateway Firmware, Citrix Netscaler Service Delivery Appliance Service Vm.
How do I fix CVE-2015-7998?
No fix has been published for CVE-2015-7998 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-7998 being exploited?
There is no known exploitation of CVE-2015-7998 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-w38x-2qgg-77h7.