[email protected]CVE-2023-24487

HistoryJul 10, 2023 - 9:15 p.m.

CVE-2023-24487

2023-07-1021:15:10

NVD-CWE-noinfo

CWE-253

[email protected]

web.nvd.nist.gov

2029

citrix

adc

gateway

cve-2023-24487

arbitrary file read

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

37.0%

JSON

Arbitrary file read in Citrix ADC and Citrix Gateway

CPENameOperatorVersion
citrix:application_delivery_controllercitrix application delivery controllerlt12.1-55.296
citrix:application_delivery_controllercitrix application delivery controllereq12.1
citrix:application_delivery_controllercitrix application delivery controllereq12.1-55.278
citrix:application_delivery_controllercitrix application delivery controllerlt12.1-65.35
citrix:application_delivery_controllercitrix application delivery controllereq12.1-55.247
citrix:application_delivery_controllercitrix application delivery controllereq12.1-64.17
citrix:application_delivery_controllercitrix application delivery controllereq12.1-64.16
citrix:application_delivery_controllercitrix application delivery controllerlt13.0-90.11
citrix:application_delivery_controllercitrix application delivery controllereq13.0
citrix:application_delivery_controllercitrix application delivery controllerlt13.1-37.150

CPE	Name	Operator	Version
citrix:application_delivery_controller	citrix application delivery controller	lt	12.1-55.296
citrix:application_delivery_controller	citrix application delivery controller	eq	12.1
citrix:application_delivery_controller	citrix application delivery controller	eq	12.1-55.278
citrix:application_delivery_controller	citrix application delivery controller	lt	12.1-65.35
citrix:application_delivery_controller	citrix application delivery controller	eq	12.1-55.247
citrix:application_delivery_controller	citrix application delivery controller	eq	12.1-64.17
citrix:application_delivery_controller	citrix application delivery controller	eq	12.1-64.16
citrix:application_delivery_controller	citrix application delivery controller	lt	13.0-90.11
citrix:application_delivery_controller	citrix application delivery controller	eq	13.0
citrix:application_delivery_controller	citrix application delivery controller	lt	13.1-37.150

Rows per page:

1-10 of 301

References

support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

37.0%

JSON

Related for CVE-2023-24487

cvelist1 prion1 nessus1 citrix1