CWE Code: 918
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Server-Side Request Forgery (SSRF)
Summary: citrix netscaler vpx through ns12.0 53.13.nc allows an ssrf attack via the /rapi/read_url uri by an authenticated attacker who has a webapp account. the attacker can gain access to the nsroot account, and execute remote commands with root privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-02-01
Last Modified Date: 2018-03-03