PT-2020-11932 · Citrix · Citrix Gateway+1

Micha Borrmann · Published 2020-03-06 · Updated 2024-08-04 · CVE-2020-10110

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix Gateway versions 11.1 through 12.1

Description The issue allows Information Exposure Through Caching. The Via header lists cache protocols and recipients between the start and end points for a request or a response. The Age header provides the age of the cached response in seconds. Both headers are commonly used for proxy cache and the information is not sensitive. Citrix disputes this as not a vulnerability, stating there is no sensitive information disclosure through the cache headers on Citrix ADC.

Recommendations For Citrix Gateway versions 11.1 through 12.1, as a temporary workaround, consider restricting access to the cache headers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2020-10110

Affected Products

Citrix Adc

Citrix Gateway

References · 9

• 🔥 https://seclists.org/fulldisclosure/2020/Mar/7 · Exploit
• 🔥 http://packetstormsecurity.com/files/156656/Citrix-Gateway-11.1-12.0-12.1-Information-Disclosure.html · Exploit
• https://support.citrix.com/search · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10110 · Security Note
• https://t.me/cybersecuritytechnologies/750 · Telegram Post
• https://t.me/cvenotify/82887 · Telegram Post
• https://t.me/cvenotify/88945 · Telegram Post
• https://t.me/defcon_news/40642 · Telegram Post