 |
|
|
Family: CGI abuses : XSS --> Category: infos
Citrix Web Interface XSS Vulnerability Scan
Vulnerability Scan Summary
Checks for Citrix Web Interface Cross Site Scripting Vulnerability
Detailed Explanation for this Vulnerability Test
The remote server is running a Citrix Web Interface server that is vulnerable to cross site scripting. When a user fails to authenticate, the Citrix Web Interface includes the error message text in the URL. The error message can be tampered with to perform a XSS attack.
See also:
- http://support.citrix.com/kb/entry.jspa?entryID=3211 (Citrix Document ID: CTX102686)
- https://www.cert.org/archive/pdf/cross_site_scripting.pdf
- http://www.security-corporation.com/articles-20031102-001.html
Solution : Upgrade to Citrix Web Interface 2.1 or newer.
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
|
|
|
|
