CVE lookup

CVE-2020-8193

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

No dossier yet. This CVE is on our watch list.

Dossiers are written only when the selection criteria are met. Until then, use the primary sources below.

Description

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.

CISA required action: Apply updates per vendor instructions.

Primary sources

  1. NVD - CVE-2020-8193
  2. CISA KEV catalog entry
  3. FIRST EPSS