← Back

CVE-2020-8247

nvd nist
Published: Sep 18, 2020Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to escalation of privileges on the management interface.

Affected (10)

Citrix
4 products
Application Delivery Controller Firmware
Gateway
Netscaler Gateway
Sd Wan Wanop
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Citrix
Application Delivery Controller Firmware
From 11.1 to 11.1-65.12
Application Delivery Controller Firmware
From 12.1 to 12.1-58.15
Application Delivery Controller Firmware
From 13.0 to 13.0-64.35
Running on/withPlatform Versions
Citrix
Application Delivery Controller
All versions
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Citrix
Gateway
From 11.1 to 11.1-65.12
Gateway
From 13.0 to 13.0-64.35
Netscaler Gateway
From 12.1 to 12.1-58.15
Configuration C
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Citrix
Sd Wan Wanop
From 10.2 to 10.2.7b
Sd Wan Wanop
From 11.0 to 11.0.3f
Sd Wan Wanop
From 11.1 to 11.1.2a
Sd Wan Wanop
From 11.2 to 11.2.1a
Running on/withPlatform Versions
Citrix
Sd Wan Wanop
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: support@hackerone.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.