Overview
- Description
- Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
- Source
- support@hackerone.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 4.3
- Impact score
- 1.4
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:N/A:N
Known exploits
Data from CISA
- Vulnerability name
- Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
- Exploit added on
- Nov 3, 2021
- Exploit action due
- May 3, 2022
- Required action
- Apply updates per vendor instructions.
Social media
- Hype score
- Not currently trending
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC8327D0-8B64-44AF-A230-AAE32F3526CF", "versionEndExcluding": "10.5-70.18", "versionStartIncluding": "10.5" }, { "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4807513-1157-4CE3-8998-9C5EB9BBDA3E", "versionEndExcluding": "11.1-64.14", "versionStartIncluding": "11.1" }, { "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "165076F2-014F-46F9-A1AB-2256D935A21B", "versionEndExcluding": "12.0-63.21", "versionStartIncluding": "12.0" }, { "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6AE49E6-A6B9-4E2B-9AFB-7F1808D052F6", "versionEndExcluding": "12.1-57.18", "versionStartIncluding": "12.1" }, { "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03868D24-B1C0-4245-AE28-0960CF2816C1", "versionEndExcluding": "13.0-58.30", "versionStartIncluding": "13.0" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "80E69E10-6F40-4FE4-9D84-F6C25EAB79D8" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA7AAC01-A7CB-48F4-A25D-4A29479CD0DA", "versionEndExcluding": "10.5-70.18", "versionStartIncluding": "10.5" }, { "criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61C33096-91FD-4387-8B90-C8981DB7F926", "versionEndExcluding": "11.1-64.14", "versionStartIncluding": "11.1" }, { "criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7605821F-21B0-4F9D-AAD1-F901CED00585", "versionEndExcluding": "12.0-63.21", "versionStartIncluding": "12.0" }, { "criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FA8946F-75C2-4515-9EBE-E1884B35ECF1", "versionEndExcluding": "12.1-57.18", "versionStartIncluding": "12.1" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:citrix:netscaler_gateway:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DEBB9B6A-1CAD-4D82-9B1E-939921986053" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:citrix:gateway_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6D0CC10-FE91-40E4-BFFD-11BE41DD4269", "versionEndExcluding": "13.0-58.30", "versionStartIncluding": "13.0" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:citrix:gateway:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3EF98B43-71DB-4230-B7AC-76EC2B1F0533" } ], "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7DF63BB-CCE6-4405-8E6D-6DF1BC975D3D", "versionEndExcluding": "10.2.7", "versionStartIncluding": "10.2" }, { "criteria": "cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D1A5E7D-C3A7-48B8-BD6D-5973F8361DEC", "versionEndExcluding": "11.0.3d", "versionStartIncluding": "11.0" }, { "criteria": "cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0471F1F0-F804-47BA-98A1-7080E1C740E7", "versionEndExcluding": "11.1.1a", "versionStartIncluding": "11.1" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:h:citrix:4000-wo:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "25C848BC-98F7-41D4-A262-8B7EB304F4C1" }, { "criteria": "cpe:2.3:h:citrix:4100-wo:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3979EFF-AE6E-4274-97E2-58C7E01C920E" }, { "criteria": "cpe:2.3:h:citrix:5000-wo:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C87AF39E-6BCF-4188-BAB1-A5CBDEBF662E" }, { "criteria": "cpe:2.3:h:citrix:5100-wo:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "38514675-1C15-460C-B34C-2633A8A36A78" } ], "operator": "OR" } ], "operator": "AND" } ]