Security News > 2020 > January > Severe Citrix Flaw: Proof-of-Concept Exploit Code Released

Technology giant Citrix says it's racing to develop patches to fix a severe flaw in its software, for which proof-of-concept exploit code has now been released.

Designated CVE-2019-19781, the directory traversal flaw has been present in Citrix's code for nearly six years, but only came to light - at least publicly - in December 2019.

Project Zero India's dump of the exploit code prompted consultancy TrustedSec to shortly thereafter release its own proof-of-concept exploit code.

Citrix has warned that the flaw is remotely exploitable and could allow access to applications and the internal network.

In its announcement of the flaw, posted on Dec. 23, 2019, the security firm said that Citrix "Responded very promptly, by creating and releasing a set of risk mitigation measures within just a couple of weeks after the vulnerability was discovered," adding that "From our experience, we know that in many cases it can take months."

News URL

https://www.inforisktoday.com/severe-citrix-flaw-proof-of-concept-exploit-code-released-a-13600