Security News > 2020 > January > Attackers exploiting critical Citrix ADC, Gateway flaw, company yet to release fixes

Nearly a month has passed since Citrix released mitigation measures for CVE-2019-19781, a critical vulnerability affecting Citrix Application Delivery Controller and Citrix Gateway, which could lead to remote code execution.

Citrix Gateway is a secure remote access network gateway solution that is offered as a cloud service or an on-premises solution.

Citrix ADC and Citrix Gateway version 13.0 all supported builds.

Citrix NetScaler ADC and NetScaler Gateway version 10.5 all supported builds.

"Depending on specific configuration, Citrix applications can be used for connecting to workstations and critical business systems. In almost every case, Citrix applications are accessible on the company network perimeter, and are therefore the first to be attacked. This vulnerability allows any unauthorized attacker to not only access published applications, but also attack other resources of the company's internal network from the Citrix server," they explained, but did not share more specific details about the flaw.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/TpawZ4tcWF4/