CNVD-2018-18138 | Vulnetix

CNVD-2018-18138 PUBLISHED

Record from circl · Published August 15, 2018

Citrix XenServer是美国思杰系统（Citrix Systems）公司的一套用于管理云、服务器和桌面虚拟基础架构的开源虚拟化平台。该平台可通过一个直观的界面提供虚拟机监控、管理和维护等功能。 Citrix XenServer 7.1及之后版本中存在目录遍历漏洞。攻击者可通过访问管理网络利用该漏洞读取dom0文件系统中的任意文件，进而获取完整的管理员访问权限。

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2018-18138
vulnetix vdb fixes CNVD-2018-18138

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2018-18138/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →