CVE-2015-2683: citrix command_center

Vulnerability summary

CVE-2015-2683 is a high (CVSS 7.5) vulnerability in citrix command_center. EPSS estimates a 5.21% chance of exploitation in the next 30 days, higher than 92.4% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 26-03-2015
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.