PT-2019-6105 · Citrix · Citrix Storefront Server

CVE-2019-13608 · Publicado 2019-08-20 · Atualizado 2025-11-06

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix StoreFront Server versions prior to 1903 Citrix StoreFront Server 7.15 LTSR versions prior to CU4 (3.12.4000) Citrix StoreFront Server 7.6 LTSR versions prior to CU8 (3.0.8000)

Description The issue is related to incorrect restriction of XML external entity references, allowing for XXE attacks. This can enable a remote attacker to conduct XXE attacks.

Recommendations For versions prior to 1903, update to version 1903 or later. For 7.15 LTSR versions prior to CU4 (3.12.4000), apply CU4 (3.12.4000) or later. For 7.6 LTSR versions prior to CU8 (3.0.8000), apply CU8 (3.0.8000) or later.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

BDU:2021-05513

CVE-2019-13608

Produtos afetados

Citrix Storefront Server

Referências · 9

• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13608 · Nota
• https://bdu.fstec.ru/vul/2021-05513 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-13608 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/cve-2019-13608 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-13608 · Aviso do Fabricante
• https://t.me/cveNotify/141934 · Publicação no Telegram
• https://support.citrix.com/article/CTX251988 · Aviso do Fabricante
• https://t.me/cvenotify/109980 · Publicação no Telegram
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota