CVE-2020-8196

🗓️ 10 Jul 2020 15:39:54Reported by hackeroneType

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users

Reporter	Title	Published	Views	Family All 28
0day.today	Citrix ADC NetScaler Local File Inclusion Exploit	14 Nov 202000:00	–	zdt
GithubExploit	Exploit for Improper Authentication in Citrix Application_Delivery_Controller_Firmware	12 Jul 202013:37	–	githubexploit
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	CVE-2020-8196	10 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-8195	10 Jul 202000:00	–	attackerkb
ATTACKERKB	CTX276688: Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update	9 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-8193	10 Jul 202000:00	–	attackerkb
BDU FSTEC	The vulnerabilities of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller), the Citrix Gateway virtual environment access control system (formerly Citrix NetScaler Gateway), and the Citrix SD-WAN WANOP network management software are related to authentication process flaws, allowing attackers to gain unauthorized access to protected information.	30 Sep 202100:00	–	bdu_fstec
Circl	CVE-2020-8196	11 Oct 202007:02	–	circl
CISA KEV Catalog	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability	3 Nov 202100:00	–	cisa_kev

[
  {
    "product": "Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html
support	www.support.citrix.com/article/CTX276688

13 Nov 2020 17:06Current

5.3Medium risk

Vulners AI Score5.3

EPSS0.26333

CWE-284