Paper/Archive/CVE-2023-4966

CVE-2023-4966

Citrix NetScaler ADC — Unauthenticated sensitive information disclosure

KEV · due 8 Nov ransomware use EPSS 100%public exploit SSVC act CVSS 9.4

CVSS 9.4 (CNA)9.4 / 10 × 3028.2 In CISA KEV+3030.0 EPSS percentile 100.01.000 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

Affected

ProductAffectedFixed inSource

NetScaler ADC14.1 – < 8.508.50CNA

NetScaler ADC13.1 – < 49.1549.15CNA

NetScaler ADC13.0 – < 92.1992.19CNA

NetScaler ADC13.1-FIPS – < 37.16437.164CNA

NetScaler ADC12.1-FIPS – < 55.30055.300CNA

NetScaler ADC12.1-NDcPP – < 55.30055.300CNA

NetScaler Gateway14.1 – < 8.508.50CNA

NetScaler Gateway13.1 – < 49.1549.15CNA

NetScaler Gateway13.0 – < 92.1992.19CNA

Scores by source

Citrix (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.citrix.com/article/CTX579459 refpacketstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4966 kevcisa.gov/known-exploited-vulnerabilities-catalog