Security News > 2020 > February > Organizations Quick to Patch Critical Citrix ADC Vulnerability

More than 80 percent of organizations impacted by CVE-2019-19781, a critical vulnerability in the Citrix Application Delivery Controller and Gateway, have already taken steps to secure their deployments.

The security bug impacts multiple versions of Citrix ADC and Gateway, but Citrix has already released permanent patches for all of them, as attacks started to ramp up.

Now, more than one month and a half after publishing their initial assessment of the vulnerability, Positive Technologies, the security firm that discovered the bug, says that one in five vulnerable companies has yet to action to fix their Citrix ADC installations.

In addition to permanent patches for the vulnerability, Citrix published mitigation steps that organizations can take to secure their Citrix ADC and Gateway deployments.

"The Citrix developers planned to resolve the issue on January 27 through January 31, but released a series of patches for various product versions a week before that. The necessary update must be installed as soon as possible. Until then, follow the security recommendations by Citrix, available since the information about the vulnerability was released," says Alexei Novikov, Director of PT Expert Security Center.

News URL

http://feedproxy.google.com/~r/Securityweek/~3/d6Ygjw74mB8/organizations-quick-patch-critical-citrix-adc-vulnerability