CVE-2015-2682

Published: Mar 26, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.

Affected (2)

Products: Citrix: Command Center

Citrix

1 product

Command Center

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Citrix Command Center	Version 5.1
Citrix Command Center	Version 5.2

Related CWEs

CWE-17

References (14)

http://packetstormsecurity.com/files/130928/Citrix-Command-Center-Configuration-Disclosure.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2015/Mar/126

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://support.citrix.com/article/CTX200584

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/73309

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1031993

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/36441/

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.securify.nl/advisory/SFY20140802/citrix_command_center_allows_downloading_of_configuration_files.html

Source: cve@mitre.org

Exploit

http://packetstormsecurity.com/files/130928/Citrix-Command-Center-Configuration-Disclosure.html