Exploit / PoCcritical
Citrix fixed critical and high
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-6151 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and… | 8.5 | <1% | ||
| CVE-2024-6235 | Sensitive information disclosure in NetScaler Console | 9.4 | 21% | ||
| CVE-2024-6236 | Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX | 7.1 | <1% | ||
| CVE-2024-6286 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows | 8.5 | <1% |
From the original article
1 min read at securityaffairs.com
IT giant Citrix addressed multiple vulnerabilities, including critical and high-severity issues in its NetScaler product. Citrix released security updates to address critical and high-severity issues in its NetScaler product . The most severe issue is an improper authorization flaw, tracked as CVE-2024-6235 (CVSS score of 9.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.