Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-2682. PoCs published by Han Sahin.
AI-analyzed exploit summary This writeup describes an information leak vulnerability in Citrix Command Center where unauthenticated attackers can download configuration files containing encoded credentials. The passwords can be trivially decoded, allowing privileged access to managed devices.
Description
Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.
Exploits (1)
This writeup describes an information leak vulnerability in Citrix Command Center where unauthenticated attackers can download configuration files containing encoded credentials. The passwords can be trivially decoded, allowing privileged access to managed devices.