{"id": "CVE-2020-8200", "bulletinFamily": "NVD", "title": "CVE-2020-8200", "description": "Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server.", "published": "2020-09-18T21:15:00", "modified": "2020-10-07T10:57:00", "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8200", "reporter": "cve@mitre.org", "references": ["https://support.citrix.com/article/CTX277455"], "cvelist": ["CVE-2020-8200"], "type": "cve", "lastseen": "2020-12-09T22:03:18", "edition": 6, "viewCount": 8, "enchantments": {"dependencies": {"references": [{"type": "attackerkb", "idList": ["AKB:18505D2D-11B6-4A22-B746-CF01E5C6608B"]}], "modified": "2020-12-09T22:03:18", "rev": 2}, "score": {"value": 4.0, "vector": "NONE", "modified": "2020-12-09T22:03:18", "rev": 2}, "vulnersScore": 4.0}, "cpe": [], "affectedSoftware": [{"cpeName": "citrix:storefront_server", "name": "citrix storefront server", "operator": "lt", "version": "2006"}, {"cpeName": "citrix:storefront_server", "name": "citrix storefront server", "operator": "lt", "version": "1912.0.1000"}, {"cpeName": "citrix:storefront_server", "name": "citrix storefront server", "operator": "lt", "version": "3.0.8001"}, {"cpeName": "citrix:storefront_server", "name": "citrix storefront server", "operator": "lt", "version": "3.12.5001"}], "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6}, "cpe23": [], "cwe": ["CWE-287"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:citrix:storefront_server:3.12.5001:*:*:*:ltsr:*:*:*", "versionEndExcluding": "3.12.5001", "versionStartIncluding": "3.12", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:citrix:storefront_server:2006:*:*:*:*:*:*:*", "versionEndExcluding": "2006", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:citrix:storefront_server:1912.0.1000:*:*:*:ltsr:*:*:*", "versionEndExcluding": "1912.0.1000", "versionStartIncluding": "1912", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:citrix:storefront_server:3.0.8001:*:*:*:ltsr:*:*:*", "versionEndExcluding": "3.0.8001", "versionStartIncluding": "3.0", "vulnerable": true}], "operator": "OR"}]}}

{"attackerkb": [{"lastseen": "2020-11-18T06:38:07", "bulletinFamily": "info", "cvelist": ["CVE-2020-8200"], "description": "Improper authentication in Citrix StoreFront Server &lt; 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server.\n\n \n**Recent assessments:** \n \n**kevthehermit** at September 14, 2020 4:27pm UTC reported:\n\n_This is still a provisional assessment pending more research._\n\n**A high severity issue has been discovered in Citrix StoreFront that, if exploited, would allow an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server.**\n\nThis CVE is for Citrix StoreFront that allows an authenticated user to gain arbitrary file read on to the StoreFront server. This could lead to further compromise depending on the ability to exploit data recovered from the server.\n\nThe official statement from Citrix can be found here. <https://support.citrix.com/article/CTX277455>\n\nUpdates are availaible\n\n * Citrix StoreFront 1912 CU1 (1912.0.1000) and later versions of Citrix StoreFront 1912 LTSR \n\n * Citrix StoreFront 3.0 for 7.6 LTSR CU8 Hotfix (3.0.8001) and later versions of StoreFront 3.0 for 7.6 LTSR \n\n * Citrix StoreFront 3.12 for 7.15 LTSR CU5 Hotfix (3.12.5001) and later versions of StoreFront 3.12 for 7.15 LTSR \n\n\nThe advisory states that attackers must be authenticated in the same Microsoft Active Directory domain as the StoreFront server, if not this vulnerability is not exploitable. \nThis significantly impacts the ability for an attacker to exploit this vulnerability. An attacker would have to be:\n\n * An insider threat with technical knowledge \n\n * An attacker that already has authenticated access to the domain\n\nAssessed Attacker Value: 3 \nAssessed Attacker Value: 2\n", "modified": "2020-10-07T00:00:00", "published": "2020-09-18T00:00:00", "id": "AKB:18505D2D-11B6-4A22-B746-CF01E5C6608B", "href": "https://attackerkb.com/topics/RKYfK2nSiz/cve-2020-8200", "type": "attackerkb", "title": "CVE-2020-8200", "cvss": {"score": 4.0, "vector": "AV:N/AC:L/Au:S/C:P/I:N/A:N"}}]}