Vulnerability Scanning Solutions, LLC.
Home
Our Process
Residential
Corporate
What We Scan For
Sample Report
Client List
Terms
Contact Us
What We Scan For
Family: CGI abuses : XSS --> Category: infos

Citrix Web Interface XSS Vulnerability Scan


Vulnerability Scan Summary
Checks for Citrix Web Interface Cross Site Scripting Vulnerability

Detailed Explanation for this Vulnerability Test

The remote server is running a Citrix Web Interface server that is vulnerable to cross site scripting. When a user fails to authenticate, the Citrix Web Interface includes the error message text in the URL. The error message can be tampered with to perform a XSS attack.

See also:
- http://support.citrix.com/kb/entry.jspa?entryID=3211 (Citrix Document ID: CTX102686)
- https://www.cert.org/archive/pdf/cross_site_scripting.pdf
- http://www.security-corporation.com/articles-20031102-001.html

Solution : Upgrade to Citrix Web Interface 2.1 or newer.
Threat Level: Medium

Click HERE for more information and discussions on this network vulnerability scan.

VSS, LLC.

P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.