Brand ClaimErleben, was verbindet

Information on the use of cookies

This website uses only the technically necessary cookies to provide you with the best possible service.
Your session is identified by a so-called session cookie in order to maintain your language choice and to allow a comfortable form use. Furthermore, a login is only possible by using a cookie.
Further information can be found in the data protection information.

Accept

Advisory 2023-1529 - Citrix Systems ADC and Citrix Systems Gateway: Multiple Vulnerabilities

Notice: You can now also find information from the Vulnerability Advisory Service in the CTI portal!
The CTI portal is available at the following address: https://cti-portal.telekom.net/advisories/2023-1529
Notice: This advisory is by exception shown completely public. You will regularly receive details on vulnerability information as a customer via your login or through our daily advisory e-mail.
5
Attack probability
high
5
Potential damage
high
remote anonymous attackerremote authenticated attackerUser interaction requiredExploit available
Date
2023-07-19
Release
2023-07-19

Operating System

  • BIOS/Firmware
  • Sonstiges

Software

  • Citrix Systems ADC 12.1-FIPS < 12.1-55.297
  • Citrix Systems ADC 12.1-NDcPP < 12.1-55.297
  • Citrix Systems ADC < 13.0-91.13
  • Citrix Systems ADC < 13.1-49.13
  • Citrix Systems ADC 13.1-FIPS < 13.1-37.159
  • Citrix Systems Citrix Gateway < 13.0-91.13
  • Citrix Systems Citrix Gateway < 13.1-49.13

Attack

An attacker from the adjacent network or a remote anonymous attacker can exploit multiple vulnerabilities in Citrix Systems ADC and Citrix Systems Citrix Gateway in order to perform a cross-site scripting attack, escalate its privileges or execute arbitrary program code.

Description

Citrix Application Delivery Controller (ADC) is a solution for application provisioning and load balancing. Citrix Gateway is a customer-managed solution that can be deployed on premises or on any public cloud, such as AWS, Azure, or Google Cloud Platform. Citrix Gateway provides users with secure access and single sign-on to all the virtual, SaaS and web applications.

CVE-2023-3466

A Cross-Site Scripting vulnerability has been identified in Citrix Systems ADC and Citrix Systems Citrix Gateway. This issue is caused by improper filtering of user-supplied data before displaying the input. A remote anonymous attacker can exploit this vulnerability to execute arbitrary script code in the security context of an affected site. Successful exploitation requires a user interaction.

CVSSv2 Base Score: 7.6 / Temporal Score: 5.6
AV:N/AC:H/AU:N/C:C/I:C/A:C/E:U/RL:OF/RC:ND
CVSSv3.1 Base Score: 8.3 / Temporal Score: 7.2
AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:X

CVE-2023-3467

A vulnerability exists in Citrix Systems ADC and Citrix Systems Citrix Gateway. This allows privilege escalation if access to the management interfaces already exists. An authenticated attacker in the local network area can exploit this vulnerability to escalate privileges.

CVSSv2 Base Score: 7.7 / Temporal Score: 5.7
AV:A/AC:L/AU:S/C:C/I:C/A:C/E:U/RL:OF/RC:ND
CVSSv3.1 Base Score: 8.0 / Temporal Score: 7.0
AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:X

CVE-2023-3519

A vulnerability exists in Citrix Systems ADC and Citrix Systems Citrix Gateway. This vulnerability exists when the device is configured as a gateway or AAA virtual server. A remote, anonymous attacker can exploit this vulnerability to execute arbitrary program code.

CVSSv2 Base Score: 7.5 / Temporal Score: 6.2
AV:N/AC:L/AU:N/C:P/I:P/A:P/E:F/RL:OF/RC:ND
CVSSv3.1 Base Score: 9.8 / Temporal Score: 9.1
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:X

The rating of the risk of this Advisory is based on the maximum values of all vulnerabilities. So the over all value is major than the value of the separate vulnerabilities.

Citrix reports that vulnerability CVE-2023-3519 is already being exploited in the wild.

Recommendation

Citrix Systems provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://support.citrix.com/article/CTX561482

Information

Citrix Security Bulletin dated 2023-07-18
https://support.citrix.com/article/CTX561482

References

CITRIX:CTX561482
CVE:CVE-2023-3466
CVE:CVE-2023-3467
CVE:CVE-2023-3519

Disclaimer

*The probability of an attack is determined by the attacker's motivation, the necessary expend and the possibilities for an attack. The damage probability is determined by the expend needed to resolute the attack and probable indirect consequences of an attack for business processes. Telekom Security assumes worst case scenarios.

Copyright © 1999-2026 Deutsche Telekom Security GmbH. All rights reserved. Reproduction and distribution of this publication in any form - even in parts - without prior written permission is forbidden.

The information contained herein has been obtained from sources believed to be reliable and trusted or have been verified. Telekom Security can take liability for completeness, accuracy and correctness only in so far, as gross negligence or intention create liability. Any liability beyond it, in particular possible damages resulting from using or non-usability of the information contained herein, is excluded.