CVE-2017-17382

CVE-2017-17382 affects Citrix NetScaler ADC and NetScaler Gateway (versions 10.5 before 67.13, 11.0 before 71.22, 11.1 before 56.19, and 12.0 before 53.22). The root cause is a Bleichenbacher RSA padding oracle that could allow a remote attacker to decrypt TLS ciphertext, i.e., a ROBOT-style atta...

CVE-2017-17549: Exposure of Sensitive Information to an Unauthorized Actor

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensitive information from the backend client TLS handshake by leveraging use of TLS...

CVE-2017-17382: Use of a Broken or Risky Cryptographic Algorithm

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a...

SSL Handshake Failure on ADC Because of Unsupported Ciphers

SSL connection failsbetween the client and the ADCappliance ADC responds with a fatal alert. The description of the alert message is “Handshake Failure 40”. The above screenshot is from a NetScaler trace packet capture. Procedure to run a trace on the ADC is explained in the following document:...

Management CPU Increases Periodically In Citrix ADC

When monitoring CPU utilization on the NetScaler, you will periodically notice Management CPU CPU 0 reporting 100% Utilization. This will most likely appear cyclic recurring at a fairly regular interval...

Citrix NetScaler ADC/NetScaler Gateway Authentication Bypass Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery. A security vulnerability in Citrix NetScaler ADC/NetScaler Gateway management interface authentication allows remote attackers to bypass security restrictions and gain unauthorized access by...

CVE-2017-14602

CVE-2017-14602 is an authentication-bypass flaw in the Citrix NetScaler ADC/NetScaler Gateway management interface. Affected versions include NetScaler ADC and Gateway 10.1 before 135.18, 10.5 before 66.9, 10.5e before 60.7010.e, 11.0 before 70.16, 11.1 before 55.13, and 12.0 before 53.13 (except...

How Do I Load Balance FTPS Servers on a NetScaler ADC

This article describes how to load balance FTPS servers on a NetScaler ADC...

Error : Certificate is Referenced by a CRL, OCSP Responder, vserver" When Deleting a Cert-key

Error : Certificate is referenced by a CRL, OCSP responder, vserver when trying to delete a cert-key even though it is not bound to any vserver , no links , OCSP present. Symptoms : The Citrix ADC may have broken the cert links and unlinked the certificate from vservers while attempting to delete...

Citrix ADC Logs Collection Guide

This article illustrates the log collection process on ADC MPX/VPX/SDX with common scenario. Contents 1. Basic Information CollectionSay goodbye to copy and paste! Use quick text for common notes, phrases, and messages. Quick text is supported in email, chat, notes, Knowledge, and more! 2...

FAQ: Citrix ADC on Microsoft Azure

Q: What is Citrix ADC, formerly Netscaler ADC, on Microsoft Azure? A: Citrix ACD on Microsoft Azure is a L4-L7 virtual networking appliance that ensures organizations have access to secure and optimized applications and assets deployed in the cloud. Citrix ADC on Azure provides a foundation for t...

PHP vulnerabilities CVE-2017-9226 and CVE-2017-7890

F5 Product Development has evaluated the currently supported releases for potential vulnerability. To determine if your release is known to be vulnerable, the components or features that are affected by the vulnerability, and for information about releases or hotfixes that address the...

CVE-2015-3642

Technical details for CVE-2015-3642 are not publicly available in the provided documents; monitor for updates.

CVE-2015-3642

The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Bui...

CVE-2015-3642: Exposure of Sensitive Information to an Unauthorized Actor

The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5, 10.0 through Build 78.6, 10.1 before Build 130.13, 10.1.e before Build 130.1302.e, 10.5 before Build 55.8, and 10.5.e before Bui...

ADC Utility - Dangerous filesystem permissions, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application ADC Utility published at the 'play' market has multiple vulnerabilities...

Configure post-authentication Endpoint Analysis scan as factor in Citrix ADC nFactor auth

For detailed information refer to Citrix Documentation -Configure post-authentication Endpoint Analysis scan as a factor in Citrix ADC nFactor authentication...

Citrix ADC: DNS resolution fails towards Name servers.

Citrix ADC is unable to resolve DNS. Effective state of the Name server could bedown...

How to Collect Client VPN Logs for ADC Gateway

This article describes how to collect VPN logs from Windows XP, Windows Vista, Windows 7, or Windows 8 for analyzing VPN connection issues in an ADC Gateway appliance...

CVE-2017-5933

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...