CVE-2020-10112 Information

Description

LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks DISPUTED LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks Citrix Gateway 11.1 12.0 and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default Citrix ADC only caches static content served under certain URL paths for Citrix Gateway usage. No dynamic content is served under these paths which implies that those cached pages would not change based on parameter values. All other data traffic going through Citrix Gateway are NOT cached by default.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Reference

http://packetstormsecurity.com/files/156660/Citrix-Gateway-11.1-12.0-12.1-Cache-Poisoning.html http://seclists.org/fulldisclosure/2020/Mar/8 https://support.citrix.com/search

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

LOW

Base Score

NONE

Base Severity

5.4