CVE-2023-24487

🗓️ 10 Jul 2023 20:51:59Reported by CitrixType

cve🔗 web.nvd.nist.gov👁 2097 Views

Arbitrary file read in Citrix ADC and Citrix Gateway CVE-2023-2448

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway virtual environment access control systems (formerly known as Citrix NetScaler Gateway) stems from improper validation of the return value of a function. This allows attackers to disclose sensitive information that should be protected.	26 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-24487	11 Jul 202300:24	–	circl
Tenable Nessus	Citrix ADC and Citrix Gateway Multiple Vulnerabilities (CTX477714)	11 May 202300:00	–	nessus
CNNVD	Citrix Systems Citrix Gateway和Citrix ADC 安全漏洞	10 Jul 202300:00	–	cnnvd
Citrix	Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-24487, CVE-2023-24488	9 May 202313:26	–	citrix
Citrix	Netscaler CVE & Security Guide	14 Jul 202400:00	–	citrix
Cvelist	CVE-2023-24487 Arbitrary file read	10 Jul 202320:51	–	cvelist
NCSC	Vulnerabilities fixed in Citrix ADC and Gateway	3 Jul 202300:00	–	ncsc
NVD	CVE-2023-24487	10 Jul 202321:15	–	nvd
OSV	CVE-2023-24487	10 Jul 202321:15	–	osv

NVD

Node

citrix application_delivery_controllerRange12.1–12.1-55.296fips

citrix application_delivery_controllerRange12.1–12.1-55.296ndcpp

citrix application_delivery_controllerRange12.1–12.1-65.35-

citrix application_delivery_controllerRange13.0–13.0-90.11-

citrix application_delivery_controllerRange13.1–13.1-37.150fips

citrix application_delivery_controllerRange13.1–13.1-45.61-

citrix gatewayRange12.1–12.1-65.35

citrix gatewayRange13.0–13.0-90.11

citrix gatewayRange13.1–13.1-45.61

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix ADC and Citrix Gateway ",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "13.1-45.61 ",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "13.0-90.11 ",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-65.35",
        "status": "affected",
        "version": "12.1",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "13.1-37.150 ",
        "status": "affected",
        "version": "13.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-NDcPP",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488

17 Jun 2026 05:39Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.3 - 7.5

EPSS0.01073

SSVC

CWE-253