CVEvulnerability
CVE-2015-2683
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic.
Affected configurations
• citrix command center 5.1
• citrix command center 5.2
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/130930/Citrx-Command-Center-Advent-JMX-Servlet-Accessible.html Exploit
- http://seclists.org/fulldisclosure/2015/Mar/127 seclists.org
- http://support.citrix.com/article/CTX200584 support.citrix.com
- http://www.securityfocus.com/archive/1/534933/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/73313 www.securityfocus.com
- http://www.securitytracker.com/id/1031993 www.securitytracker.com
- https://www.securify.nl/advisory/SFY20140804/advent_jmx_servlet_of_citrx_command_center_is_accessible_to_unauthenticated_users.html Exploit
- http://packetstormsecurity.com/files/130930/Citrx-Command-Center-Advent-JMX-Servlet-Accessible.html Exploit
- http://seclists.org/fulldisclosure/2015/Mar/127 seclists.org
- http://support.citrix.com/article/CTX200584 support.citrix.com
- http://www.securityfocus.com/archive/1/534933/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/73313 www.securityfocus.com
- http://www.securitytracker.com/id/1031993 www.securitytracker.com
- https://www.securify.nl/advisory/SFY20140804/advent_jmx_servlet_of_citrx_command_center_is_accessible_to_unauthenticated_users.html Exploit