NetScaler web management cookie cipher weakness

  1. Network Vulnerabilities
  2. Web Servers
  3. NetScaler web management cookie cipher weakness
Summary
The remote web server is prone to an information disclosure attack. Description : The version of the Citrix NetScaler web management interface on the remote host uses weak encryption for protecting the HTTP cookie content by XORing sensitive values, including the username and password, with a fixed key stream.
Solution
Do not stay logged into the NetScaler web management interface while browsing other web sites.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities