CVE-2020-8300 (GCVE-0-2020-8300)
Vulnerability from cvelistv5 – Published: 2021-06-16 13:08 – Updated: 2024-08-04 09:56
VLAI?
Summary
Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.
Severity ?
No CVSS data available.
CWE
- CWE-284 - Improper Access Control - Generic (CWE-284)
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| n/a | Citrix ADC, Citrix Gateway |
Affected:
Fixed in Citrix ADC and Citrix Gateway 13.0 before 13.0-82.41, Citrix ADC and Citrix Gateway 12.1 before 12.1-62.23, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T09:56:28.314Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://support.citrix.com/article/CTX297155"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Citrix ADC, Citrix Gateway",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Fixed in Citrix ADC and Citrix Gateway 13.0 before 13.0-82.41, Citrix ADC and Citrix Gateway 12.1 before 12.1-62.23, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Control - Generic (CWE-284)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-16T13:08:16",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://support.citrix.com/article/CTX297155"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "support@hackerone.com",
"ID": "CVE-2020-8300",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Citrix ADC, Citrix Gateway",
"version": {
"version_data": [
{
"version_value": "Fixed in Citrix ADC and Citrix Gateway 13.0 before 13.0-82.41, Citrix ADC and Citrix Gateway 12.1 before 12.1-62.23, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Access Control - Generic (CWE-284)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://support.citrix.com/article/CTX297155",
"refsource": "MISC",
"url": "https://support.citrix.com/article/CTX297155"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2020-8300",
"datePublished": "2021-06-16T13:08:16",
"dateReserved": "2020-01-28T00:00:00",
"dateUpdated": "2024-08-04T09:56:28.314Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1\", \"versionEndExcluding\": \"12.1-62.23\", \"matchCriteriaId\": \"003574BC-2C37-44D6-9F5E-E931F5ECE169\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0\", \"versionEndExcluding\": \"13.0-82.41\", \"matchCriteriaId\": \"FAE6C6C5-2C85-484E-A61A-C17096C4D9F7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.1\", \"versionEndExcluding\": \"11.1-65.20\", \"matchCriteriaId\": \"D77B2AD2-BAF1-4FD3-B7C5-88AC1B130971\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.1\", \"versionEndExcluding\": \"11.1-65.20\", \"matchCriteriaId\": \"E178AA28-B24F-4565-A314-1E58AAC54648\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1\", \"versionEndExcluding\": \"12.1-62.23\", \"matchCriteriaId\": \"024F407E-F369-4B9C-BC3C-5CB0FF613526\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0\", \"versionEndExcluding\": \"13.0-82.41\", \"matchCriteriaId\": \"A5675439-B8C6-4ABD-8D53-F2D9BB49F33D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.1\", \"versionEndExcluding\": \"12.1-55.238\", \"matchCriteriaId\": \"8BEBCAD2-581F-4217-8425-46C03584E673\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx\\\\/sdx_14030_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BCB11BC1-0702-436F-BFE2-14B38B118D99\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx\\\\/sdx_14060_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8569B182-D0A7-414B-B0A3-4DD2FAB44F69\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx\\\\/sdx_14080_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ABB9B3E9-EED4-4D74-BE4C-DFAFAB1F0994\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15030-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F60729DF-EDC8-4462-ABD2-6E4199F22701\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15040-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B789F02A-56CB-4871-9D9D-FAB0F31A72A1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15060-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"06699186-E7E4-463C-8844-77B2A750B985\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15080-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F00DBEBF-29BE-4D6A-BF79-19208AAB0D7F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15100-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"848169A6-CAD7-4E14-BC5D-B2E94DC93CCB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_15120-50g_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C69709C-885A-4F19-899D-A7B5CE7066EF\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_8905_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B2136C1-8AB6-4C70-87F4-1F8A93A876C9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_8910_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"492323D2-339D-404C-BB9B-E09ABB87FA2B\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:citrix:mpx_8920_fips:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AB83185D-DD6F-47CD-B500-499F9EF65093\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.\"}, {\"lang\": \"es\", \"value\": \"Citrix ADC y Citrix/NetScaler Gateway versiones anteriores a 13.0-82.41, 12.1-62.23, 11.1-65.20 y Citrix ADC 12.1-FIPS versiones anteriores a 12.1-55.238, sufren de un control de acceso inapropiado que permite el secuestro de la autenticaci\\u00f3n SAML mediante un ataque de phishing para robar una sesi\\u00f3n de usuario v\\u00e1lida. Tome en cuenta que Citrix ADC o Citrix Gateway deben estar configurados como un SP SAML o un IdP SAML para que esto sea posible\"}]",
"id": "CVE-2020-8300",
"lastModified": "2024-11-21T05:38:41.320",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:P/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2021-06-16T14:15:08.440",
"references": "[{\"url\": \"https://support.citrix.com/article/CTX297155\", \"source\": \"support@hackerone.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.citrix.com/article/CTX297155\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "support@hackerone.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"support@hackerone.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-284\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-8300\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2021-06-16T14:15:08.440\",\"lastModified\":\"2024-11-21T05:38:41.320\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.\"},{\"lang\":\"es\",\"value\":\"Citrix ADC y Citrix/NetScaler Gateway versiones anteriores a 13.0-82.41, 12.1-62.23, 11.1-65.20 y Citrix ADC 12.1-FIPS versiones anteriores a 12.1-55.238, sufren de un control de acceso inapropiado que permite el secuestro de la autenticaci\u00f3n SAML mediante un ataque de phishing para robar una sesi\u00f3n de usuario v\u00e1lida. Tome en cuenta que Citrix ADC o Citrix Gateway deben estar configurados como un SP SAML o un IdP SAML para que esto sea posible\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1\",\"versionEndExcluding\":\"12.1-62.23\",\"matchCriteriaId\":\"003574BC-2C37-44D6-9F5E-E931F5ECE169\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0\",\"versionEndExcluding\":\"13.0-82.41\",\"matchCriteriaId\":\"FAE6C6C5-2C85-484E-A61A-C17096C4D9F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.1\",\"versionEndExcluding\":\"11.1-65.20\",\"matchCriteriaId\":\"D77B2AD2-BAF1-4FD3-B7C5-88AC1B130971\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.1\",\"versionEndExcluding\":\"11.1-65.20\",\"matchCriteriaId\":\"E178AA28-B24F-4565-A314-1E58AAC54648\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1\",\"versionEndExcluding\":\"12.1-62.23\",\"matchCriteriaId\":\"024F407E-F369-4B9C-BC3C-5CB0FF613526\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0\",\"versionEndExcluding\":\"13.0-82.41\",\"matchCriteriaId\":\"A5675439-B8C6-4ABD-8D53-F2D9BB49F33D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:application_delivery_controller:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E69E10-6F40-4FE4-9D84-F6C25EAB79D8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.1\",\"versionEndExcluding\":\"12.1-55.238\",\"matchCriteriaId\":\"8BEBCAD2-581F-4217-8425-46C03584E673\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx\\\\/sdx_14030_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCB11BC1-0702-436F-BFE2-14B38B118D99\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx\\\\/sdx_14060_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8569B182-D0A7-414B-B0A3-4DD2FAB44F69\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx\\\\/sdx_14080_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABB9B3E9-EED4-4D74-BE4C-DFAFAB1F0994\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15030-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F60729DF-EDC8-4462-ABD2-6E4199F22701\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15040-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B789F02A-56CB-4871-9D9D-FAB0F31A72A1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15060-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06699186-E7E4-463C-8844-77B2A750B985\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15080-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F00DBEBF-29BE-4D6A-BF79-19208AAB0D7F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15100-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"848169A6-CAD7-4E14-BC5D-B2E94DC93CCB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_15120-50g_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C69709C-885A-4F19-899D-A7B5CE7066EF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_8905_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B2136C1-8AB6-4C70-87F4-1F8A93A876C9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_8910_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"492323D2-339D-404C-BB9B-E09ABB87FA2B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:citrix:mpx_8920_fips:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB83185D-DD6F-47CD-B500-499F9EF65093\"}]}]}],\"references\":[{\"url\":\"https://support.citrix.com/article/CTX297155\",\"source\":\"support@hackerone.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.citrix.com/article/CTX297155\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…