CVE:CVE-2001-0760
CNNVD:CNNVD-200110-063
Citrix Nfuse 1.51版本存在漏洞。远程攻击者借助不提供session字段对的launch.asp的畸形请求获取web根的绝对路径。
solution:Upgrade citrix nfuse to a higher version than 1.51,and avoid the version 1.51