NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read

A vulnerability in NetScaler Console and NetScaler SDX allows attackers to read any file on the system without proper authorization. This could expose sensitive configuration files, credentials, and other confidential data.

CWE-1284 (Improper Validation of Specified Quantity in Input) enables arbitrary file read via insufficient input validation in NetScaler Console and SDX (SVM). The attack requires network access to the affected service; successful exploitation exposes sensitive files and system information accessible to the application context.