Improper access control

🗓️ 10 Jul 2020 16:15:00Reported by PRIOn knowledge baseType

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users

Reporter	Title	Published	Views	Family All 28
0day.today	Citrix ADC NetScaler Local File Inclusion Exploit	14 Nov 202000:00	–	zdt
GithubExploit	Exploit for Improper Authentication in Citrix Application_Delivery_Controller_Firmware	12 Jul 202013:37	–	githubexploit
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	CVE-2020-8196	10 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-8195	10 Jul 202000:00	–	attackerkb
ATTACKERKB	CTX276688: Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update	9 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-8193	10 Jul 202000:00	–	attackerkb
BDU FSTEC	The vulnerabilities of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller), the Citrix Gateway virtual environment access control system (formerly Citrix NetScaler Gateway), and the Citrix SD-WAN WANOP network management software are related to authentication process flaws, allowing attackers to gain unauthorized access to protected information.	30 Sep 202100:00	–	bdu_fstec
Circl	CVE-2020-8196	11 Oct 202007:02	–	circl
CISA KEV Catalog	Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability	3 Nov 202100:00	–	cisa_kev

Source	Link
support	www.support.citrix.com/article/CTX276688
packetstormsecurity	www.packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html

20 Sep 2022 17:23Current

5.1Medium risk

Vulners AI Score5.1

EPSS0.68113