CVE-2013-6942: citrix netscaler_application_delivery_controller Cross-Site Request Forgery (CSRF)

Vulnerability summary

CVE-2013-6942 is a medium (CVSS 6.8) Cross-Site Request Forgery (CSRF) vulnerability in citrix netscaler_application_delivery_controller. EPSS estimates a 0.87% chance of exploitation in the next 30 days, higher than 58.2% of scored vulnerabilities.

Timeline

1. 10-03-2014
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

• CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.