CVE-2015-2682

MEDIUM 5.0CVE-2015-2682 · Published 26/03/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
command center citrix	`= 5.1= 5.2`	No fix yet

Description

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.

References

packetstormsecurity.com/files/130928/Citrix-Command-Center-Configuration-Disclosure.html · Exploit
seclists.org/fulldisclosure/2015/Mar/126 · Mailing List
support.citrix.com/article/CTX200584 · Vendor Advisory
securityfocus.com/bid/73309 · Third Party Advisory
securitytracker.com/id/1031993 · Third Party Advisory
exploit-db.com/exploits/36441 · Third Party Advisory
securify.nl/advisory/SFY20140802/citrix_command_center_allows_downloading_of_configuration_files.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free