Description
The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers to obtain sensitive network configuration information if this address is not the same as the address being used by the web interface.
References
- 20071126 Citrix NetScaler Web Management Cookie Weakness mailing-list
- 3409 third-party-advisory