« Volver al listado

CVE-2020-8196

Estado: AnalizadaMedia (4.3)⚠ Explotación activa

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CISA KEV — explotada activamente

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vector AV:N/PR:L indica explotación remota por usuario autenticado (T1210). CWE-284/287 y descripción revelan acceso a información confidencial: información disclosure con control de acceso impropio (T1078, T1552).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementActive Directory ConfigurationUser TrainingPassword PoliciesUpdate SoftwareApplication Developer Guidance

Tecnologías afectadas (4)

Citrix — Application Delivery Controller FirmwareCitrix — Gateway FirmwareCitrix — Netscaler Gateway FirmwareCitrix — Sd-wan Wanop

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-8196",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2020-8196",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-07T12:33:10.375429Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "support@hackerone.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP",
          "versions": [
            {
              "status": "affected",
              "version": "Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-07-10T16:15:12.407",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "support@hackerone.com"
    },
    {
      "url": "https://support.citrix.com/article/CTX276688",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "support@hackerone.com"
    },
    {
      "url": "http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.citrix.com/article/CTX276688",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8196",
      "tags": [
        "US Government Resource"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "support@hackerone.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users."
    },
    {
      "lang": "es",
      "value": "Un control de acceso inapropiado en Citrix ADC y Citrix Gateway versiones anteriores a 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 y 10.5-70.18 y Citrix SDWAN WAN-OP versiones anteriores a 11.1.1a, 11.0.3d y 10.2.7, resulta en una divulgación de información limitada para usuarios poco privilegiados"
    }
  ],
  "lastModified": "2026-06-17T03:26:02.043",
  "cisaActionDue": "2022-05-03",
  "cisaExploitAdd": "2021-11-03",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC8327D0-8B64-44AF-A230-AAE32F3526CF",
              "versionEndExcluding": "10.5-70.18",
              "versionStartIncluding": "10.5"
            },
            {
              "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4807513-1157-4CE3-8998-9C5EB9BBDA3E",
              "versionEndExcluding": "11.1-64.14",
              "versionStartIncluding": "11.1"
            },
            {
              "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "165076F2-014F-46F9-A1AB-2256D935A21B",
              "versionEndExcluding": "12.0-63.21",
              "versionStartIncluding": "12.0"
            },
            {
              "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6AE49E6-A6B9-4E2B-9AFB-7F1808D052F6",
              "versionEndExcluding": "12.1-57.18",
              "versionStartIncluding": "12.1"
            },
            {
              "criteria": "cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03868D24-B1C0-4245-AE28-0960CF2816C1",
              "versionEndExcluding": "13.0-58.30",
              "versionStartIncluding": "13.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA7AAC01-A7CB-48F4-A25D-4A29479CD0DA",
              "versionEndExcluding": "10.5-70.18",
              "versionStartIncluding": "10.5"
            },
            {
              "criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61C33096-91FD-4387-8B90-C8981DB7F926",
              "versionEndExcluding": "11.1-64.14",
              "versionStartIncluding": "11.1"
            },
            {
              "criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7605821F-21B0-4F9D-AAD1-F901CED00585",
              "versionEndExcluding": "12.0-63.21",
              "versionStartIncluding": "12.0"
            },
            {
              "criteria": "cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FA8946F-75C2-4515-9EBE-E1884B35ECF1",
              "versionEndExcluding": "12.1-57.18",
              "versionStartIncluding": "12.1"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:citrix:gateway_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6D0CC10-FE91-40E4-BFFD-11BE41DD4269",
              "versionEndExcluding": "13.0-58.30",
              "versionStartIncluding": "13.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7DF63BB-CCE6-4405-8E6D-6DF1BC975D3D",
              "versionEndExcluding": "10.2.7",
              "versionStartIncluding": "10.2"
            },
            {
              "criteria": "cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D1A5E7D-C3A7-48B8-BD6D-5973F8361DEC",
              "versionEndExcluding": "11.0.3d",
              "versionStartIncluding": "11.0"
            },
            {
              "criteria": "cpe:2.3:o:citrix:sd-wan_wanop:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0471F1F0-F804-47BA-98A1-7080E1C740E7",
              "versionEndExcluding": "11.1.1a",
              "versionStartIncluding": "11.1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:citrix:4000-wo:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "25C848BC-98F7-41D4-A262-8B7EB304F4C1"
            },
            {
              "criteria": "cpe:2.3:h:citrix:4100-wo:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F3979EFF-AE6E-4274-97E2-58C7E01C920E"
            },
            {
              "criteria": "cpe:2.3:h:citrix:5000-wo:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C87AF39E-6BCF-4188-BAB1-A5CBDEBF662E"
            },
            {
              "criteria": "cpe:2.3:h:citrix:5100-wo:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "38514675-1C15-460C-B34C-2633A8A36A78"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "support@hackerone.com",
  "cisaRequiredAction": "Apply updates per vendor instructions.",
  "cisaVulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability"
}