CVE-2023-4966

EUVD-2023-54802
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.4 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CitrixCNA
9.4 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
citrixnetscaler_application_delivery_controller
12.1 ≤
𝑥
< 12.1-55.300
citrixnetscaler_application_delivery_controller
12.1 ≤
𝑥
< 12.1-55.300
citrixnetscaler_application_delivery_controller
13.0 ≤
𝑥
< 13.0-92.19
citrixnetscaler_application_delivery_controller
13.1 ≤
𝑥
< 13.1-37.164
citrixnetscaler_application_delivery_controller
13.1 ≤
𝑥
< 13.1-49.15
citrixnetscaler_application_delivery_controller
14.1 ≤
𝑥
< 14.1-8.50
citrixnetscaler_gateway
13.0 ≤
𝑥
< 13.0-92.19
citrixnetscaler_gateway
13.1 ≤
𝑥
< 13.1-49.15
citrixnetscaler_gateway
14.1 ≤
𝑥
< 14.1-8.50
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html
https://support.citrix.com/article/CTX579459
http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html
https://support.citrix.com/article/CTX579459
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4966