Description

Acunetix determined that it was possible to leak the Citrix NetScaler's memory.

Remediation

Upgrade to the latest version of Citrix NetScaler

References

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2023-4966 and CVE-2023-4967

Citrix Bleed: Leaking Session Tokens with CVE-2023-4966

Related Vulnerabilities

WordPress Plugin Users Ultra Membership Arbitrary File Upload (1.5.58)

Play Framework Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-13864)

WordPress Plugin Zendesk Chat Cross-Site Request Forgery (1.4.5)

WordPress Plugin Bookmarkify Multiple Vulnerabilities (2.9.2)

WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1.4)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Tags

Information Disclosure Missing Update Known Vulnerabilities CWE-119 CVE-2023-4966