CVE-2007-6192 The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain c...
MediumCVSS 4.3
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix netscaler | = 8.0-build_47.8 | No fix listed |
References
- 3409 third-party-advisory
- 1018991 vdb-entry
- 20071126 Citrix NetScaler Web Management Cookie Weakness mailing-list
- netscaler-cookie-weak-encryption(38646) vdb-entry