Description

Acunetix determined that it was possible to access Citrix ADC NetScaler's sensitive files without authentication.

Remediation

Upgrade to the latest version of Citrix NetScaler

References

Adventures in Citrix security research

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update

Related Vulnerabilities

WordPress Plugin WordPress Landing Page-Squeeze Page-Responsive Landing Page Builder Free-WP Lead Plus X Multiple Vulnerabilities (0.98)

WordPress Plugin Custom Frontend Login Registration Form Multiple Cross-Site Scripting Vulnerabilities (1.01)

WordPress Plugin WordPress Button Plugin MaxButtons Security Bypass (1.19.0)

MySQL CVE-2020-2928 Vulnerability (CVE-2020-2928)

ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5849)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Missing Update Known Vulnerabilities CWE-284 CVE-2020-8193