PT-2019-12373 · Citrix · Citrix Netscaler Sd-Wan+1

Published 2019-05-08 · Updated 2024-02-09 · CVE-2019-11550

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.0 Citrix NetScaler SD-WAN versions 10.0.x through 10.0.6

Description The issue is related to improper certificate validation.

Recommendations For Citrix SD-WAN versions 10.2.x through 10.2.0, update to version 10.2.1 or later. For Citrix NetScaler SD-WAN versions 10.0.x through 10.0.6, update to version 10.0.7 or later.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2019-11550

Affected Products

Citrix Netscaler Sd-Wan

Citrix Sd-Wan

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-11550 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11550 · Vendor Advisory
• https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin · Vendor Advisory
• https://support.citrix.com/article/CTX247735 · Vendor Advisory
• https://twitter.com/ComputerPunks/status/1756060664312045727 · Twitter Post