CVE-2023-24487

2023-07-1021:15:10

CWE-253

[email protected]

web.nvd.nist.gov

citrix adc

citrix gateway

arbitrary file read

cve-2023-24487

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

43.4%

JSON

Arbitrary file read in Citrix ADC and Citrix Gateway

Affected configurations

Nvd

Node

citrixapplication_delivery_controllerRange12.1–12.1-55.296fips

citrixapplication_delivery_controllerRange12.1–12.1-55.296ndcpp

citrixapplication_delivery_controllerRange12.1–12.1-65.35-

citrixapplication_delivery_controllerRange13.0–13.0-90.11-

citrixapplication_delivery_controllerRange13.1–13.1-37.150fips

citrixapplication_delivery_controllerRange13.1–13.1-45.61-

citrixgatewayRange12.1–12.1-65.35

citrixgatewayRange13.0–13.0-90.11

citrixgatewayRange13.1–13.1-45.61

VendorProductVersionCPE
citrixapplication_delivery_controller*cpe:2.3:a:citrix:application_delivery_controller:*:*:*:*:fips:*:*:*
citrixapplication_delivery_controller*cpe:2.3:a:citrix:application_delivery_controller:*:*:*:*:ndcpp:*:*:*
citrixapplication_delivery_controller*cpe:2.3:a:citrix:application_delivery_controller:*:*:*:*:-:*:*:*
citrixgateway*cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	application_delivery_controller	*	cpe:2.3:a:citrix:application_delivery_controller:::::fips:::*
citrix	application_delivery_controller	*	cpe:2.3:a:citrix:application_delivery_controller:::::ndcpp:::*
citrix	application_delivery_controller	*	cpe:2.3:a:citrix:application_delivery_controller:::::-:::*
citrix	gateway	*	cpe:2.3:a:citrix:gateway::::::::