Lucene search

[email protected]CVE-2020-8258

HistoryDec 14, 2020 - 8:15 p.m.

CVE-2020-8258

2020-12-1420:15:00

CWE-269

[email protected]

web.nvd.nist.gov

cve-2020-8258

citrix

gateway

windows

privilege management

vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

35.6%

JSON

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files.

CPENameOperatorVersion
citrix:gateway_plug-incitrix gateway plug-inle13.0-61.48
citrix:gateway_plug-incitrix gateway plug-inle12.1-58

CPE	Name	Operator	Version
citrix:gateway_plug-in	citrix gateway plug-in	le	13.0-61.48
citrix:gateway_plug-in	citrix gateway plug-in	le	12.1-58

References

support.citrix.com/article/CTX282684

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

35.6%

JSON

Related for CVE-2020-8258

cvelist1 prion1 nessus1 citrix1