Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Citrix NetScaler VPX 安全漏洞
Vulnerability Description
Citrix NetScaler VPX是美国思杰系统（Citrix Systems）公司的一套面向企业和云数据中心的服务交付网络平台的虚拟版本。该平台通过采用先进的虚拟化架构可在单一硬件设备中支持多个NetScaler实例，满足各业务部门、关键应用和服务提供商客户的不同需求。 Citrix NetScaler VPX NS12.0 53.13.nc及之前版本中存在安全漏洞。攻击者可借助/rapi/read_url URI利用该漏洞获取nsroot账户的访问权限，并以root权限执行命令。
CVSS Information
N/A
Vulnerability Type
N/A