CRITICAL🇵🇱 Wersja polska

CVE-2019-18225

CVSS 9.8v3.1pub. 2019-10-21upd. 2024-11-21

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Citrix Application Delivery Controller

    HW
    Citrix
    all versions

  • Citrix Application Delivery Controller Firmware

    OS
    Citrix
    10.511.112.012.113.0

  • Citrix Gateway

    HW
    Citrix
    all versions

  • Citrix Gateway Firmware

    OS
    Citrix
    13.0

  • Citrix Netscaler Gateway

    HW
    Citrix
    all versions

  • Citrix Netscaler Gateway Firmware

    OS
    Citrix
    10.511.112.012.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2026-3055CRITICAL9.3⚠ KEVPL ✓same product

Citrix NetScaler ADC/Gateway — memory overread przez SAML IDP

CVE-2025-7775CRITICAL9.2⚠ KEVPL ✓same product

Przepełnienie pamięci w Citrix NetScaler ADC i Gateway — RCE/DoS

CVE-2025-6543CRITICAL9.2⚠ KEVPL ✓same product

Przepełnienie pamięci w Citrix NetScaler ADC i Gateway – RCE/DoS przez VPN

CVE-2025-5777CRITICAL9.3⚠ KEVPL ✓same product

CitrixBleed 2 — memory overread w Citrix NetScaler ADC i Gateway

CVE-2023-4966CRITICAL9.4⚠ KEVPL ✓same product

Citrix Bleed – wyciek tokenów sesji w NetScaler ADC i Gateway