安全研究

安全漏洞
Citrix NetScaler Application Delivery Controller Cookie信息泄露漏洞

发布日期:2014-07-15
更新日期:2014-07-17

受影响系统:
Citrix NetScaler Application Delivery Controller (ADC) 9.x
Citrix NetScaler Application Delivery Controller (ADC) 10.x
描述:
BUGTRAQ  ID: 68537
CVE(CAN) ID: CVE-2014-4347

Citrix NetScaler ADC是应用交付控制器,可以优化企业服务交付。

Citrix NetScaler Application Delivery Controller (ADC)及NetScaler Gateway 9.3-62.4、10.1-126.12之前版本存在信息泄露漏洞,攻击者可利用此漏洞访问敏感信息。

<*来源:Stefan Viehb&#195;&#182;ck
  
  链接:http://support.citrix.com/article/CTX140863
*>

建议:
厂商补丁:

Citrix
------
Citrix已经为此发布了一个安全公告(CTX140863)以及相应补丁:
CTX140863:Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Security Updates
链接:http://support.citrix.com/article/CTX140863

补丁下载:

NetScaler ADC Product Software
https://www.citrix.com/downloads/netscaler-adc/product-software.html
NetScaler ADC Virtual Appliance
https://www.citrix.com/downloads/netscaler-adc/virtual-appliances.html
NetScaler Gateway Product Software
https://www.citrix.com/downloads/netscaler-gateway/product-software.html
NetScaler Gateway Virtual Appliance
https://www.citrix.com/downloads/netscaler-gateway/virtual-appliances.html

浏览次数:1961
严重程度:0(网友投票)
本安全漏洞由绿盟科技翻译整理,版权所有,未经许可,不得转载
绿盟科技给您安全的保障