İçeriğe geç

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP appliance Security Update

Citrix ADC (eski adıyla NetScaler ADC), Citrix Gateway (eski adıyla NetScaler Gateway) ve Citrix SD-WAN WANOP cihaz modelleri 4000-WO, 4100-WO, 5000-WO ve 5100-WO’da birden fazla güvenlik açığı bulunmuştur.

Bu güvenlik açıklarından yararlanılırsa aşağıdaki güvenlik sorunlarına neden olabilir:

CVE-ID Description CWE Affected Products Pre-conditions
CVE-2020-8299 Network-based denial-of-service from within the same Layer 2 network segment CWE-400: Uncontrolled Resource Consumption Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP The attacker machine must be in the same Layer 2 network segment as the vulnerable appliance
CVE-2020-8300 SAML authentication hijack through a phishing attack to steal a valid user session CWE-284: Improper access control Citrix ADC, Citrix Gateway Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP

Citrix ADC, Citrix Gateway ve Citrix SD-WAN WANOP’un aşağıdaki desteklenen sürümleri, Medium severity bir güvenlik açığı olan CVE-2020-8299’u adresler.

  • Citrix ADC and Citrix Gateway 13.0-76.29 and later releases of 13.0
  • Citrix ADC and Citrix Gateway 12.1-61.18 and later releases of 12.1
  • Citrix ADC and NetScaler Gateway 11.1-65.20 and later releases of 11.1
  • Citrix ADC 12.1-FIPS 12.1-55.238 and later releases of 12.1-FIPS
  • Citrix SD-WAN WANOP 11.4.0 and later releases of 11.4
  • Citrix SD-WAN WANOP 11.3.2 and later releases of 11.3
  • Citrix SD-WAN WANOP 11.3.1a and later releases of 11.3
  • Citrix SD-WAN WANOP 11.2.3a and later releases of 11.2
  • Citrix SD-WAN WANOP 11.1.2c and later releases of 11.1
  • Citrix SD-WAN WANOP 10.2.9a and later releases of 10.2

 

Citrix ADC ve Citrix Gateway’in aşağıdaki desteklenen sürümleri, High severity bir güvenlik açığı olan CVE-2020-8300’ü ele almaktadır.

  • Citrix ADC and Citrix Gateway 13.0-82.41 and later releases of 13.0
  • Citrix ADC and NetScaler Gateway ADC 12.1-62.23 and later releases of 12.1
  • Citrix ADC and NetScaler Gateway 11.1-65.20 and later releases of 11.1
  • Citrix ADC 12.1-FIPS 12.1-55.238 and later releases of 12.1-FIPS

Ek olarak, cihazınızı stabil versiyona yükselttikten sonra CVE-2020-8300 sorunu çözmek için cihaz configurasyon’ unu aşağıda bulunan Configuration Reference Guide’ a bakarak yapabilirsiniz.

https://support.citrix.com/article/CTX316577

Güvenlik açığı ile ilgili daha ayrıntılı bilgiye aşağıdaki linkten ulaşabilirsiniz;

https://support.citrix.com/article/CTX297155

Tarih:Haberler

39 Yorum

  1. Hi, i believe that i saw you visited my website so i came to
    go back the desire?.I’m attempting to in finding issues to enhance my
    web site!I assume its ok to use a few of your concepts!!

  2. Thanks for ones marvelous posting! I quite enjoyed reading it,
    you could be a great author. I will be sure to
    bookmark your blog and will often come back in the foreseeable
    future. I want to encourage you continue your great work,
    have a nice morning!

  3. My family members every time say that I am killing my time here at web, however I know I am getting knowledge everyday by reading such good
    articles.

  4. Have you ever considered about adding a little bit more than just your articles?

    I mean, what you say is important and all. However imagine if you added some great visuals or videos to give your posts more, “pop”!
    Your content is excellent but with pics and video clips, this website could
    undeniably be one of the best in its field. Excellent blog!

  5. Hmm it looks like your website ate my first comment (it was
    super long) so I guess I’ll just sum it up what I wrote and say,
    I’m thoroughly enjoying your blog. I too am an aspiring blog writer but
    I’m still new to everything. Do you have any tips for rookie blog writers?
    I’d certainly appreciate it.

  6. Wonderful beat ! I wish to apprentice whilst you amend your web site, how
    can i subscribe for a weblog site? The account helped
    me a acceptable deal. I were a little bit familiar of this
    your broadcast provided vibrant clear concept

  7. Wow, superb blog layout! How long have you been blogging for?
    you made blogging look easy. The overall look of your
    website is magnificent, as well as the content!

  8. Hello, this weekend is nice designed for me,
    for the reason that this point in time i am reading this wonderful educational post here at my
    home.

  9. I just like the helpful info you provide to your articles.

    I’ll bookmark your weblog and check once more right here
    frequently. I am fairly certain I’ll be told a lot of new stuff proper right here!
    Good luck for the following!

  10. Does your blog have a contact page? I’m having trouble
    locating it but, I’d like to shoot you an e-mail.
    I’ve got some ideas for your blog you might be interested in hearing.
    Either way, great blog and I look forward to seeing it develop over time.

  11. Yay google is my queen aided me to find this outstanding site! .

  12. It’s hard to
    come by experienced
    people on this subject, but you seem like you know
    what you’re talking about!
    Thanks

  13. fantastic and also incredible blog. I truly want to thank you, for giving
    us much better information.

  14. Zac Zac

    I do not even know how I ended up here, but I thought this post was great.

    I don’t know who you are but definitely you’re going to a famous
    blogger if you are not already
    Cheers!

  15. It’s an awesome post
    in support of all the online viewers; they will
    take benefit from it I
    am sure.

  16. Hello everyone, it’s my first pay a quick visit at this website, and article is really fruitful in favor of me, keep up posting these articles.|

  17. Wonderful goods from you, man. I’ve understand your stuff previous to and you’re just extremely wonderful. I actually like what you’ve acquired here, certainly like what you are saying and the way in which you say it. You make it entertaining and you still care for to keep it wise. I can not wait to read far more from you. This is really a terrific site.|

  18. Greetings! Quick question that’s totally off topic. Do you know how to make your site mobile friendly? My website looks weird when browsing from my iphone4. I’m trying to find a template or plugin that might be able to fix this issue. If you have any suggestions, please share. Thanks!|

  19. Unquestionably believe that which you stated. Your favorite justification seemed to be on the internet the easiest thing to be aware of. I say to you, I certainly get irked while people consider worries that they just do not know about. You managed to hit the nail upon the top and also defined out the whole thing without having side effect , people could take a signal. Will likely be back to get more. Thanks|

  20. It’s difficult to find knowledgeable people on this subject, but you sound like you know what you’re talking about! Thanks|

  21. There’s certainly a lot to learn about this issue. I like all of the points you have made.|

  22. With havin so much content do you ever run into any issues of plagorism or copyright infringement? My website has a lot of exclusive content I’ve either created myself or outsourced but it seems a lot of it is popping it up all over the web without my permission. Do you know any solutions to help protect against content from being stolen? I’d really appreciate it.|

  23. Greetings I am so happy I found your weblog, I really found you by error, while I was searching on Askjeeve for something else, Regardless I am here now and would just like to say cheers for a incredible post and a all round thrilling blog (I also love the theme/design), I don’t have time to read it all at the minute but I have bookmarked it and also included your RSS feeds, so when I have time I will be back to read much more, Please do keep up the excellent jo.|

  24. Thanks , I have just been searching for info about this topic for a while and yours is the greatest I’ve came upon so far. But, what in regards to the bottom line? Are you certain about the source?|

  25. Very great post. I just stumbled upon your weblog and wished to mention that I’ve truly loved surfing around your blog posts. After all I will be subscribing for your feed and I hope you write once more very soon!|

  26. This design is spectacular! You definitely know how to keep a reader entertained. Between your wit and your videos, I was almost moved to start my own blog (well, almost…HaHa!) Wonderful job. I really enjoyed what you had to say, and more than that, how you presented it. Too cool!|

  27. I do not even know how I ended up here, but I thought this post was great. I don’t know who you are but certainly you’re going to a famous blogger if you are not already 😉 Cheers!

  28. In fact when someone doesn’t know afterward its up to other visitors that they will help, so here it happens.|

  29. My family members always say that I am killing my time here at net, but I know I am getting experience everyday by reading thes good articles or reviews.|

  30. whoah this blog is fantastic i really like reading yourarticles. Stay up the great work! You understand, lots of people are searching around for this info,you can help them greatly.

  31. A round of applause for your article.Really looking forward to read more. Much obliged.

  32. This is my first time visit at here and i am truly pleassant to read everthing at one place.|

  33. May I simply just say what a comfort to uncover somebody who really understands what they’re talking about on the internet. You certainly understand how to bring a problem to light and make it important. More and more people ought to look at this and understand this side of the story. I was surprised you are not more popular because you certainly possess the gift.|

  34. Article writing is also a fun, if you be acquainted with then you can write or else it is complicated to write.|

  35. Hi there, just was aware of your weblog through Google, and found that it is really informative. I’m gonna watch out for brussels. I will be grateful in the event you continue this in future. Many folks will likely be benefited out of your writing. Cheers!|

  36. Hmm is anyone else having problems with the pictures on this blog loading? I’m trying to determine if its a problem on my end or if it’s the blog. Any feedback would be greatly appreciated.|

Bir cevap yazın

E-posta hesabınız yayımlanmayacak. Gerekli alanlar * ile işaretlenmişlerdir