cvelistv5 - cve-2020-8300

cve-2020-8300

Vulnerability from cvelistv5

Published
2021-06-16 13:08
Modified
2024-08-04 09:56
Severity ?
Summary
Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.
References
▼	URL	Tags
	support@hackerone.com	https://support.citrix.com/article/CTX297155	Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://support.citrix.com/article/CTX297155	Vendor Advisory
Impacted products
Vendor
Product
Version
▼
n/a
Citrix ADC, Citrix Gateway
Version: Fixed in Citrix ADC and Citrix Gateway 13.0 before 13.0-82.41, Citrix ADC and Citrix Gateway 12.1 before 12.1-62.23, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238
Show details on NVD website
JSON
To clipboard
{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:56:28.314Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX297155"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Citrix ADC, Citrix Gateway",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Fixed in Citrix ADC and Citrix Gateway 13.0 before 13.0-82.41, Citrix ADC and Citrix Gateway 12.1 before 12.1-62.23, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "Improper Access Control - Generic (CWE-284)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-16T13:08:16",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.citrix.com/article/CTX297155"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "support@hackerone.com",
          "ID": "CVE-2020-8300",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Citrix ADC, Citrix Gateway",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Fixed in Citrix ADC and Citrix Gateway 13.0 before 13.0-82.41, Citrix ADC and Citrix Gateway 12.1 before 12.1-62.23, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Improper Access Control - Generic (CWE-284)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.citrix.com/article/CTX297155",
              "refsource": "MISC",
              "url": "https://support.citrix.com/article/CTX297155"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2020-8300",
    "datePublished": "2021-06-16T13:08:16",
    "dateReserved": "2020-01-28T00:00:00",
    "dateUpdated": "2024-08-04T09:56:28.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1\", \"versionEndExcluding\": \"12.1-62.23\", \"matchCriteriaId\": \"003574BC-2C37-44D6-9F5E-E931F5ECE169\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0\", \"versionEndExcluding\": \"13.0-82.41\", \"matchCriteriaId\": \"FAE6C6C5-2C85-484E-A61A-C17096C4D9F7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.1\", \"versionEndExcluding\": \"11.1-65.20\", \"matchCriteriaId\": \"D77B2AD2-BAF1-4FD3-B7C5-88AC1B130971\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.1\", \"versionEndExcluding\": \"11.1-65.20\", \"matchCriteriaId\": \"E178AA28-B24F-4565-A314-1E58AAC54648\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1\", \"versionEndExcluding\": \"12.1-62.23\", \"matchCriteriaId\": \"024F407E-F369-4B9C-BC3C-5CB0FF613526\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0\", \"versionEndExcluding\": \"13.0-82.41\", \"matchCriteriaId\": \"A5675439-B8C6-4ABD-8D53-F2D9BB49F33D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1\", \"versionEndExcluding\": \"12.1-55.238\", \"matchCriteriaId\": \"8BEBCAD2-581F-4217-8425-46C03584E673\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx\\\\/sdx_14030_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BCB11BC1-0702-436F-BFE2-14B38B118D99\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx\\\\/sdx_14060_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8569B182-D0A7-414B-B0A3-4DD2FAB44F69\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx\\\\/sdx_14080_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ABB9B3E9-EED4-4D74-BE4C-DFAFAB1F0994\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15030-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F60729DF-EDC8-4462-ABD2-6E4199F22701\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15040-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B789F02A-56CB-4871-9D9D-FAB0F31A72A1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15060-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"06699186-E7E4-463C-8844-77B2A750B985\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15080-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F00DBEBF-29BE-4D6A-BF79-19208AAB0D7F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15100-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"848169A6-CAD7-4E14-BC5D-B2E94DC93CCB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15120-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C69709C-885A-4F19-899D-A7B5CE7066EF\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_8905_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B2136C1-8AB6-4C70-87F4-1F8A93A876C9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_8910_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"492323D2-339D-404C-BB9B-E09ABB87FA2B\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_8920_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AB83185D-DD6F-47CD-B500-499F9EF65093\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.\"}, {\"lang\": \"es\", \"value\": \"Citrix ADC y Citrix/NetScaler Gateway versiones anteriores a 13.0-82.41, 12.1-62.23, 11.1-65.20 y Citrix ADC 12.1-FIPS versiones anteriores a 12.1-55.238, sufren de un control de acceso inapropiado que permite el secuestro de la autenticaci\\u00f3n SAML mediante un ataque de phishing para robar una sesi\\u00f3n de usuario v\\u00e1lida. Tome en cuenta que Citrix ADC o Citrix Gateway deben estar configurados como un SP SAML o un IdP SAML para que esto sea posible\"}]",
      "id": "CVE-2020-8300",
      "lastModified": "2024-11-21T05:38:41.320",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:P/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2021-06-16T14:15:08.440",
      "references": "[{\"url\": \"https://support.citrix.com/article/CTX297155\", \"source\": \"support@hackerone.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.citrix.com/article/CTX297155\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "support@hackerone.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"support@hackerone.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-284\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2020-8300\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2021-06-16T14:15:08.440\",\"lastModified\":\"2024-11-21T05:38:41.320\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.\"},{\"lang\":\"es\",\"value\":\"Citrix ADC y Citrix/NetScaler Gateway versiones anteriores a 13.0-82.41, 12.1-62.23, 11.1-65.20 y Citrix ADC 12.1-FIPS versiones anteriores a 12.1-55.238, sufren de un control de acceso inapropiado que permite el secuestro de la autenticaci\u00f3n SAML mediante un ataque de phishing para robar una sesi\u00f3n de usuario v\u00e1lida. Tome en cuenta que Citrix ADC o Citrix Gateway deben estar configurados como un SP SAML o un IdP SAML para que esto sea posible\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1\",\"versionEndExcluding\":\"12.1-62.23\",\"matchCriteriaId\":\"003574BC-2C37-44D6-9F5E-E931F5ECE169\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0\",\"versionEndExcluding\":\"13.0-82.41\",\"matchCriteriaId\":\"FAE6C6C5-2C85-484E-A61A-C17096C4D9F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.1\",\"versionEndExcluding\":\"11.1-65.20\",\"matchCriteriaId\":\"D77B2AD2-BAF1-4FD3-B7C5-88AC1B130971\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.1\",\"versionEndExcluding\":\"11.1-65.20\",\"matchCriteriaId\":\"E178AA28-B24F-4565-A314-1E58AAC54648\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1\",\"versionEndExcluding\":\"12.1-62.23\",\"matchCriteriaId\":\"024F407E-F369-4B9C-BC3C-5CB0FF613526\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0\",\"versionEndExcluding\":\"13.0-82.41\",\"matchCriteriaId\":\"A5675439-B8C6-4ABD-8D53-F2D9BB49F33D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1\",\"versionEndExcluding\":\"12.1-55.238\",\"matchCriteriaId\":\"8BEBCAD2-581F-4217-8425-46C03584E673\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx\\\\/sdx_14030_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCB11BC1-0702-436F-BFE2-14B38B118D99\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx\\\\/sdx_14060_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8569B182-D0A7-414B-B0A3-4DD2FAB44F69\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx\\\\/sdx_14080_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABB9B3E9-EED4-4D74-BE4C-DFAFAB1F0994\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15030-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F60729DF-EDC8-4462-ABD2-6E4199F22701\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15040-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B789F02A-56CB-4871-9D9D-FAB0F31A72A1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15060-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06699186-E7E4-463C-8844-77B2A750B985\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15080-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F00DBEBF-29BE-4D6A-BF79-19208AAB0D7F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15100-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"848169A6-CAD7-4E14-BC5D-B2E94DC93CCB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15120-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C69709C-885A-4F19-899D-A7B5CE7066EF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_8905_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B2136C1-8AB6-4C70-87F4-1F8A93A876C9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_8910_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"492323D2-339D-404C-BB9B-E09ABB87FA2B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_8920_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB83185D-DD6F-47CD-B500-499F9EF65093\"}]}]}],\"references\":[{\"url\":\"https://support.citrix.com/article/CTX297155\",\"source\":\"support@hackerone.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.citrix.com/article/CTX297155\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}
Sightings

Author	Source	Type	Date
Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Action not permitted

cve-2020-8300

Vulnerability from cvelistv5

ghsa-pq9q-4fcv-7rvj

Vulnerability from github

gsd-2020-8300

Vulnerability from gsd

var-202106-0491

Vulnerability from variot

Tags

Sightings

Nomenclature
