CVE-2020-8196 : Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.

Published 2020-07-10 16:15:12

Updated 2025-02-07 13:15:31

Source HackerOne

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2020-8196

Citrix » Netscaler Gateway Firmware
Versions from including (>=) 11.1 and before (<) 11.1-64.14
cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Netscaler Gateway » Version: N/A
Citrix » Netscaler Gateway Firmware
Versions from including (>=) 12.1 and before (<) 12.1-57.18
cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Netscaler Gateway » Version: N/A
Citrix » Netscaler Gateway Firmware
Versions from including (>=) 12.0 and before (<) 12.0-63.21
cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Netscaler Gateway » Version: N/A
Citrix » Netscaler Gateway Firmware
Versions from including (>=) 10.5 and before (<) 10.5-70.18
cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Netscaler Gateway » Version: N/A
Citrix » Application Delivery Controller Firmware
Versions from including (>=) 13.0 and before (<) 13.0-58.30
cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Application Delivery Controller » Version: N/A
Citrix » Application Delivery Controller Firmware
Versions from including (>=) 12.0 and before (<) 12.0-63.21
cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Application Delivery Controller » Version: N/A
Citrix » Application Delivery Controller Firmware
Versions from including (>=) 11.1 and before (<) 11.1-64.14
cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Application Delivery Controller » Version: N/A
Citrix » Application Delivery Controller Firmware
Versions from including (>=) 12.1 and before (<) 12.1-57.18
cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Application Delivery Controller » Version: N/A
Citrix » Application Delivery Controller Firmware
Versions from including (>=) 10.5 and before (<) 10.5-70.18
cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Application Delivery Controller » Version: N/A
Citrix » Gateway Firmware
Versions from including (>=) 13.0 and before (<) 13.0-58.30
cpe:2.3:o:citrix:gateway_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » Gateway » Version: N/A
Citrix » Sd-wan Wanop
Versions from including (>=) 11.1 and before (<) 11.1.1a
cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » 4000-wo » Version: N/A
When used together with: Citrix » 4100-wo » Version: N/A
When used together with: Citrix » 5000-wo » Version: N/A
When used together with: Citrix » 5100-wo » Version: N/A
Citrix » Sd-wan Wanop
Versions from including (>=) 11.0 and before (<) 11.0.3d
cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » 4000-wo » Version: N/A
When used together with: Citrix » 4100-wo » Version: N/A
When used together with: Citrix » 5000-wo » Version: N/A
When used together with: Citrix » 5100-wo » Version: N/A
Citrix » Sd-wan Wanop
Versions from including (>=) 10.2 and before (<) 10.2.7
cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*
Matching versions
When used together with: Citrix » 4000-wo » Version: N/A
When used together with: Citrix » 4100-wo » Version: N/A
When used together with: Citrix » 5000-wo » Version: N/A
When used together with: Citrix » 5100-wo » Version: N/A

CVE-2020-8196 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2020-8196

Added on 2021-11-03 Action due date 2022-05-03

Exploit prediction scoring system (EPSS) score for CVE-2020-8196

EPSS FAQ

0.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 72 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-8196

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-02-07
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2020-8196

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Assigned by: support@hackerone.com (Secondary)
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-8196

http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html

Citrix ADC NetScaler Local File Inclusion ≈ Packet Storm
Third Party Advisory;VDB Entry

CVEs referencing this url
https://support.citrix.com/article/CTX276688

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update
Vendor Advisory

CVEs referencing this url