Citrix NetScaler / Access Gateway Security Bypass Vulnerability

Last Update Date: 29 Apr 2013 11:29 Release Date: 29 Apr 2013 4289 Views

RISK: High Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability has been identified in Citrix NetScaler and Access Gateway, which can be exploited by malicious user to access internal network resources.

Note: Firmware versions 10.0 through 10.0.74.4 are also affected when deployed in a double hop configuration only.

Impact

Security Restriction Bypass

System / Technologies affected

Citrix Access Gateway 9.x
Citrix NetScaler 9.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to fixed version

Vulnerability Identifier

CVE-2013-2767

Source

Citrix
Secunia
SecurityTracker