CVE-2014-8580

Citrix NetScaler ADC and Gateway - Authenticated Network Resource Access

Title source: llm
STIX 2.1

Description

Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before 10.5-52.11, 10.1.122.17 before 10.1-129.11, and 10.1-120.1316.e before 10.1-129.1105.e, when using unspecified configurations, allows remote authenticated users to access "network resources" of other users via unknown vectors.

References (4)

Core 4
Core References
Patch, Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX200254
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62114
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031212
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98661

Scores

EPSS 0.0025
EPSS Percentile 48.5%

Details

CWE
CWE-264
Status published
Products (24)
citrix/netscaler_application_delivery_controller_firmware 10.1.120.1316.e
citrix/netscaler_application_delivery_controller_firmware 10.1.121
citrix/netscaler_application_delivery_controller_firmware 10.1.122
citrix/netscaler_application_delivery_controller_firmware 10.1.123
citrix/netscaler_application_delivery_controller_firmware 10.1.124
citrix/netscaler_application_delivery_controller_firmware 10.1.125
citrix/netscaler_application_delivery_controller_firmware 10.1.126
citrix/netscaler_application_delivery_controller_firmware 10.1.127
citrix/netscaler_application_delivery_controller_firmware 10.1.128
citrix/netscaler_application_delivery_controller_firmware 10.1.129
... and 14 more
Published Nov 07, 2014
Tracked Since Feb 18, 2026