|
|
Vulnerability Assessment & Network Security Forums |
|||||||||
|
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> CGI abuses : XSS >> Citrix Web Interface XSS Vulnerability Assessment Details
|
Citrix Web Interface XSS |
||
|
Checks for Citrix Web Interface Cross Site Scripting Vulnerability Detailed Explanation for this Vulnerability Assessment The remote server is running a Citrix Web Interface server that is vulnerable to cross site scripting. When a user fails to authenticate, the Citrix Web Interface includes the error message text in the URL. The error message can be tampered with to perform a XSS attack. See also: - http://support.citrix.com/kb/entry.jspa?entryID=3211 (Citrix Document ID: CTX102686) - https://www.cert.org/archive/pdf/cross_site_scripting.pdf - http://www.security-corporation.com/articles-20031102-001.html Solution : Upgrade to Citrix Web Interface 2.1 or newer. Network Security Threat Level: Medium Networks Security ID: 8939 Vulnerability Assessment Copyright: This script is Copyright (C) 2003 Michael J. Richardson |
||
|
KVM Switch Boxes, Cables |
|
||
|
No Discussions have been posted on this vulnerability. |