Security News > 2020 > January > Citrix Releases First Patches to Fix Severe Vulnerability

Citrix has released the first of several fixes that address a vulnerability in its Application Deliver Controller and Gateway products discovered by security researchers in December.

The first of the patches to fix the vulnerability in Application Delivery Controller and Gateway versions 11.1 and 12 were available as of Sunday, earlier than the company had originally expected, says Fermin Serna, the CISO of Citrix, which is based in Fort Lauderdale, Florida.

On Friday, Citrix plans to release patches for the other affected versions of Citrix Application Delivery Controller, which was formerly known as NetScaler ADC, and Citrix Gateway, which was previously known as NetScaler Gateway.

Citrix had previously released mitigation strategies to help customers until the release of patches.

With the Citrix vulnerability - it does *not* just apply to the management interface, the Citrix information is wrong - it also applies to VIPs.

News URL

https://www.inforisktoday.com/citrix-releases-first-patches-to-fix-severe-vulnerability-a-13627