CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-10-10
Citrix NetScaler ADC and Gateway Information Disclosure & Session Hijacking (Citrix Bleed, CVE-2023-4966)
[Affected Scope] NetScaler ADC and NetScaler Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
[Impact] Unauthenticated remote attackers can trigger a memory buffer over-read to leak active session tokens, bypassing Multi-Factor Authentication (MFA) to hijack sessions
[Mitigation] Immediately apply the official vendor security patches and terminate all active user sessions to invalidate potentially compromised tokens