PT-2020-18806 · Citrix · Edge Client For Linux

Published 2020-07-01 · Updated 2021-07-21 · CVE-2020-5908

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Edge Client for Linux versions 11.6.1 through 11.6.5.2 Edge Client for Linux versions 12.1.0 through 12.1.5

Description The issue exposes the full session ID in local log files, potentially allowing unauthorized access to sensitive information.

Recommendations For versions 11.6.1 through 11.6.5.2, consider restricting access to the local log files to minimize the risk of exploitation. For versions 12.1.0 through 12.1.5, consider restricting access to the local log files to minimize the risk of exploitation.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2020-5908

Affected Products

Edge Client For Linux

References · 4

• https://support.f5.com/csp/article/K33023560 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5908 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5908 · Security Note
• https://kb.cert.org/vuls/id/290915 · Note