Description

Acunetix determined that it was possible to access Citrix ADC NetScaler's sensitive files without authentication.

Remediation

Upgrade to the latest version of Citrix NetScaler

References

Adventures in Citrix security research

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update

Related Vulnerabilities

Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1806)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11822)

WordPress Plugin Simple File Downloader Cross-Site Scripting (1.0.4)

MySQL CVE-2019-2420 Vulnerability (CVE-2019-2420)

WordPress Plugin One User Avatar-User Profile Picture Unspecified Vulnerability (2.3.8)

Severity

Medium

Classification

CVE-2020-8193 CWE-284 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Missing Update Known Vulnerabilities