Description (CNA)
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Citrix / NetScaler ADC | affected 14.1 before 8.50; affected 13.1 before 49.15; affected 13.0 before 92.19; affected 13.1-FIPS before 37.164; affected 12.1-FIPS before 55.300; affected 12.1-NDcPP before 55.300 |
| Citrix / NetScaler Gateway | affected 14.1 before 8.50; affected 13.1 before 49.15; affected 13.0 before 92.19 |
CWE
CWE-119
References
- https://support.citrix.com/article/CTX579459
- http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html
ADP enrichment
No English description supplied.
No English description supplied.