SB2020011409 - Path traversal and remote code execution in Citrix ADC and Gateway

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020011409

SB2020011409 - Path traversal and remote code execution in Citrix ADC and Gateway

Published: January 14, 2020

Security Bulletin ID SB2020011409
Severity
Critical
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Path traversal (CVE-ID: CVE-2019-19781)

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in Citrix NetScaler. A remote attacker can send a specially crafted HTTP request and read arbitrary files or execute commands on the system.

Successful exploitation of the vulnerability may allow remote code execution.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References