共找到 6 条公开漏洞记录
NetScaler ADC and NetScaler Gateway contain an insufficient input validation vulnerability when configured as a SAML IDP, leading to memory overread, letting attackers potentially access sensitive memory, exploit requires configuration as SAML IDP
Citrix Gateway是一套安全的远程接入解决方案，可提供应用级和数据级管控功能，以实现用户从任何地点远程访问应用和数据。Citrix官方于2023年7月18日发布了安全风险通告，其中包含 Citrix ADC/Gateway 远程代码执行漏洞（CVE-2023-3519），攻击者可在无需登录的情况下执行任意代码。目前互联网上尚未公开相关利用详情。 影响版本 Citrix:NetScaler ADC 、NetScaler Gateway 13.0 ～ 13.0-91.13 Citrix:NetScaler ADC 、NetScaler Gateway 13.1 ～ 13.1-49.13 Citrix:NetScaler ADC 13.1-FIPS ～ 13.1-37.159 Citrix:NetScaler ADC 12.1-FIPS ～ 12.1-55.297 Citrix:NetScaler ADC 12.1-NDcPP ～ 12.1-55.297 安全版本 Citrix:NetScaler ADC 、NetScaler Gateway 13.0-91.13 Citrix:NetScaler ADC 、NetScaler Gateway 13.1-49.13 Citrix:NetScaler ADC 13.1-37.159 Citrix:NetScaler ADC 12.1-55.297
Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18. Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allow modification of a file download.
Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints.
Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 contain a cross-site scripting vulnerability due to improper input validation.
Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0 are susceptible to directory traversal vulnerabilities.