CVE-2017-6316 – Citrix Multiple Products Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2017-6316

20 Jul 2017 — Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID. Los dispositivos Citrix NetScaler SD-WAN hasta la versión v9.1.2.26.561201 permite a atacantes remotos ejecutar comandos de shell aleatorios como root mediante la cookie CGISESSID. En los dispositivos cloudBridge (el nombre formal de NetScaler SD-WAN)... • https://www.exploit-db.com/exploits/42346 • CWE-20: Improper Input Validation •