CVE-2023-24487

🗓️ 10 Jul 2023 20:51:59Reported by CitrixType

cve🔗 web.nvd.nist.gov👁 2089 Views

Arbitrary file read in Citrix ADC and Citrix Gateway CVE-2023-2448

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-24487	11 Jul 202300:24	–	circl
Tenable Nessus	Citrix ADC and Citrix Gateway Multiple Vulnerabilities (CTX477714)	11 May 202300:00	–	nessus
CNNVD	Citrix Systems Citrix Gateway和Citrix ADC 安全漏洞	10 Jul 202300:00	–	cnnvd
Citrix	Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-24487, CVE-2023-24488	9 May 202313:26	–	citrix
Citrix	Netscaler CVE & Security Guide	14 Jul 202400:00	–	citrix
Cvelist	CVE-2023-24487 Arbitrary file read	10 Jul 202320:51	–	cvelist
NCSC	Vulnerabilities fixed in Citrix ADC and Gateway	3 Jul 202300:00	–	ncsc
NVD	CVE-2023-24487	10 Jul 202321:15	–	nvd
OSV	CVE-2023-24487	10 Jul 202321:15	–	osv
Prion	Design/Logic Flaw	10 Jul 202321:15	–	prion

NVD

Node

citrix application_delivery_controllerRange12.1–12.1-55.296fips

citrix application_delivery_controllerRange12.1–12.1-55.296ndcpp

citrix application_delivery_controllerRange12.1–12.1-65.35-

citrix application_delivery_controllerRange13.0–13.0-90.11-

citrix application_delivery_controllerRange13.1–13.1-37.150fips

citrix application_delivery_controllerRange13.1–13.1-45.61-

citrix gatewayRange12.1–12.1-65.35

citrix gatewayRange13.0–13.0-90.11

citrix gatewayRange13.1–13.1-45.61

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix ADC and Citrix Gateway ",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "13.1-45.61 ",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "13.0-90.11 ",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-65.35",
        "status": "affected",
        "version": "12.1",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "13.1-37.150 ",
        "status": "affected",
        "version": "13.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-NDcPP",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488

21 Nov 2024 07:47Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.3 - 7.5

EPSS0.35713

SSVC

CWE-253