Lucene search

K
cvelistCitrixCVELIST:CVE-2023-24487
HistoryJul 10, 2023 - 8:51 p.m.

CVE-2023-24487 Arbitrary file read

2023-07-1020:51:59
CWE-253
Citrix
www.cve.org
citrix
adc
gateway
arbitrary file read
vulnerability

6.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

38.6%

Arbitrary file readย in Citrix ADC and Citrix Gateway

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix ADC and Citrix Gatewayโ€ฏ",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "13.1-45.61 ",
        "status": "affected",
        "version": "13.1",
        "versionType": "patch"
      },
      {
        "lessThan": "13.0-90.11โ€ฏ",
        "status": "affected",
        "version": "13.0",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-65.35",
        "status": "affected",
        "version": "12.1",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "13.1-37.150 ",
        "status": "affected",
        "version": "13.1-FIPS ",
        "versionType": "patch"
      },
      {
        "lessThan": "12.1-55.296",
        "status": "affected",
        "version": "12.1-NDcPP",
        "versionType": "patch"
      }
    ]
  }
]

6.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

38.6%

Related for CVELIST:CVE-2023-24487