IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
4.3Mittel KEV

CVE-2020-8196Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Veröffentlicht: (vor 6 Jahren)

Bekannt ausgenutzt — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

CISA hat am 03.11.2021 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 03.05.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2020-8196

Beschreibung

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.

Schwachstellentyp (CWE): CWE-284CWE-287

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
citrix application delivery controller firmware 10.5 – < 10.5-70.18
citrix gateway firmware 13.0 – < 13.0-58.30
citrix netscaler gateway firmware 10.5 – < 10.5-70.18
citrix sd-wan wanop 10.2 – < 10.2.7
— Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7

Referenzen und Patches

CPE-Treffer (NVD) (13)
  • cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:* ≥ 10.5 < 10.5-70.18
  • cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:* ≥ 11.1 < 11.1-64.14
  • cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:* ≥ 12.0 < 12.0-63.21
  • cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:* ≥ 12.1 < 12.1-57.18
  • cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:* ≥ 13.0 < 13.0-58.30
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:* ≥ 10.5 < 10.5-70.18
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:* ≥ 11.1 < 11.1-64.14
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:* ≥ 12.0 < 12.0-63.21
  • cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:* ≥ 12.1 < 12.1-57.18
  • cpe:2.3:o:citrix:gateway_firmware:*:*:*:*:*:*:*:* ≥ 13.0 < 13.0-58.30
  • cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:* ≥ 10.2 < 10.2.7
  • cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:* ≥ 11.0 < 11.0.3d
  • cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:* ≥ 11.1 < 11.1.1a

Neue CVEs im selben Produkt — Citrix NetScaler ADC / Gateway

8.8Hoch
CVE-2026-88778

TCP Initial Sequence Number (ISN) prediction

Citrix NetScaler ADC; Citrix NetScaler Gateway

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1…