CVE-2001-0760 Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
MediumCVSS 5.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix nfuse | = 1.51 | No fix listed |
References
- 20010630 Nfuse reveals full path mailing-list vendor-advisory
- 20010702 Re: Nfuse reveals full path mailing-list vendor-advisory
- 2956 exploit vdb-entry vendor-advisory
- citrix-nfuse-path-disclosure(6786) vdb-entry