CVE-2016-2071

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway versions 11.x before 11.0 Build 64.34 Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway versions 10.5 before 10.5 Build 59.13 Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway versions 10.5.e before Build 59.1305.e

Description The issue is related to insufficient access control in the Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway, allowing remote attackers to gain privileges via unspecified NS Web GUI commands. This can enable a remote attacker to elevate their privileges.

Recommendations For versions 11.x before 11.0 Build 64.34, update to Build 64.34 or later. For versions 10.5 before 10.5 Build 59.13, update to Build 59.13 or later. For versions 10.5.e before Build 59.1305.e, update to Build 59.1305.e or later.