PT-2024-36437 · Citrix · Netscaler Gateway+1

Published 2024-07-09 · Updated 2024-08-01 · CVE-2024-5492

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NetScaler ADC and NetScaler Gateway (affected versions not specified)

Description An open redirect issue allows a remote unauthenticated attacker to redirect users to arbitrary websites. This affects NetScaler ADC and NetScaler Gateway, enabling attackers to potentially trick users into visiting malicious sites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2024-5492

Affected Products

Netscaler Adc

Netscaler Gateway

References · 16

• https://osv.dev/vulnerability/CVE-2024-5492 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5492 · Security Note
• https://support.citrix.com/external/article?articleUrl=CTX677944-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492 · Note
• https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492 · Note
• https://twitter.com/NetScaler/status/1810713532159160574 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1811136644822540329 · Twitter Post
• https://t.me/cvenotify/85716 · Telegram Post
• https://twitter.com/ComputerPunks/status/1810660312435318814 · Twitter Post
• https://twitter.com/endi24/status/1810647167645667584 · Twitter Post
• https://twitter.com/ThorstenRood/status/1810795663199740297 · Twitter Post
• https://twitter.com/ThorstenRood/status/1810795601069592655 · Twitter Post
• https://twitter.com/CVEnew/status/1811322706287329452 · Twitter Post
• https://twitter.com/Yorkie71/status/1810698840774750352 · Twitter Post
• https://twitter.com/ThomasPreischl/status/1810658769178599627 · Twitter Post
• https://twitter.com/AndrewScott_8/status/1810653468362969380 · Twitter Post