CVE-2018-6810

Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
citrixnetscaler_gateway_firmware
10.5
citrixnetscaler_gateway_firmware
11.0
citrixnetscaler_gateway_firmware
11.1
citrixnetscaler_gateway_firmware
12.0
citrixnetscaler_application_delivery_controller_firmware
10.5
citrixnetscaler_application_delivery_controller_firmware
11.0
citrixnetscaler_application_delivery_controller_firmware
11.1
citrixnetscaler_application_delivery_controller_firmware
12.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securitytracker.com/id/1040440
https://support.citrix.com/article/CTX232161
http://www.securitytracker.com/id/1040440
https://support.citrix.com/article/CTX232161