CVE-2015-2682

The record

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.

Affected packages

Related vulnerabilities

• CVE-2015-7833 The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through… CWE-17
• CVE-2015-0275 The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows… CWE-17
• CVE-2015-2535 Active Directory in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and… CWE-17
• CVE-2015-2526 Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a… CWE-17
• CVE-2014-8155 GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA… CWE-17
• CVE-2015-1805 The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel… CWE-17
• CVE-2015-3183 The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does… CWE-17
• CVE-2015-4620 name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before… CWE-17