Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

A vulnerability allowing improper input validation has been identified in Citrix ADC, Citrix Gateway, and certain Citrix SD-WAN WANOP appliance models. This vulnerability affects multiple versions of Citrix ADC and Citrix Gateway, as well as Citrix SD-WAN WANOP versions prior to 11.1.1a, 11.0.3d, and 10.2.7. The issue allows limited information disclosure to users with low privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure to low-privileged users.

Remediation

Citrix has released patches for all supported versions of Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP. Users are advised to update to the latest version. Instructions for downloading the updates are available on the Citrix website. For Citrix Gateway Plug-in for Linux, users should log in to an updated version of Citrix Gateway to receive the update.