Citrix SD-WAN CVE-2019-11550 Information Disclosure Vulnerability
BID:108114
Info
Citrix SD-WAN CVE-2019-11550 Information Disclosure Vulnerability
| Bugtraq ID: | 108114 |
| Class: | Design Error |
| CVE: |
CVE-2019-11550 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 30 2019 12:00AM |
| Updated: | Apr 30 2019 12:00AM |
| Credit: | Sergey Gordeychik, Denis Kolegov, and Nikita Oleksov of SD-WAN New Hop(e) team. |
| Vulnerable: |
Citrix SD-WAN 10.2.1 Citrix SD-WAN 10.2 Citrix SD-WAN 10.1.2 Citrix SD-WAN 10.1.1 Citrix SD-WAN 10.1 Citrix NetScaler SD-WAN 10.0.6 Citrix NetScaler SD-WAN 10.0.5 Citrix NetScaler SD-WAN 10.0.4 Citrix NetScaler SD-WAN 10.0.3 Citrix NetScaler SD-WAN 10.0.2 Citrix NetScaler SD-WAN 10.0.1 Citrix NetScaler SD-WAN 9.3.6 Citrix NetScaler SD-WAN 9.3.5 Citrix NetScaler SD-WAN 9.3.4 Citrix NetScaler SD-WAN 9.3.3 Citrix NetScaler SD-WAN 9.3.2 Citrix NetScaler SD-WAN 9.3.1 Citrix NetScaler SD-WAN 9.3 Citrix NetScaler SD-WAN 9.2.1 Citrix NetScaler SD-WAN 9.2 Citrix NetScaler SD-WAN 9.1.2 Citrix NetScaler SD-WAN 9.1.1 Citrix NetScaler SD-WAN 9.1 Citrix NetScaler SD-WAN 9.0.1 Citrix NetScaler SD-WAN 9.0 |
| Not Vulnerable: |
Citrix SD-WAN 10.2.2 Citrix NetScaler SD-WAN 10.0.7 |
Discussion
Citrix SD-WAN CVE-2019-11550 Information Disclosure Vulnerability
Citrix SD-WAN Appliance is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
The following versions of Citrix SD-WAN are vulnerable:
NetScaler SD-WAN 9.x are vulnerable
NetScaler SD-WAN 10.0.x through and prior to 10.0.7 are vulnerable
Citrix SD-WAN 10.1.x are vulnerable
Citrix SD-WAN 10.2.x through and prior to 10.2.2 are vulnerable
Citrix SD-WAN Appliance is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
The following versions of Citrix SD-WAN are vulnerable:
NetScaler SD-WAN 9.x are vulnerable
NetScaler SD-WAN 10.0.x through and prior to 10.0.7 are vulnerable
Citrix SD-WAN 10.1.x are vulnerable
Citrix SD-WAN 10.2.x through and prior to 10.2.2 are vulnerable
Exploit / POC
Citrix SD-WAN CVE-2019-11550 Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Citrix SD-WAN CVE-2019-11550 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Citrix SD-WAN CVE-2019-11550 Information Disclosure Vulnerability
References:
References:
- Citrix Homepage (citrix)
- Citrix SD-WAN Security Update (Citrix)