CVE-2023-24487

Arbitrary file read

State: Published
Severity: 6.3 Medium
Published: Jul 10, 2023
Updated: Oct 25, 2024
Reserved: Jan 24, 2023

Description

Arbitrary file read in Citrix ADC and Citrix Gateway

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	Citrix

Weaknesses

CWE-253 Incorrect Check of Function Return Value

Affected Products

Product	Versions
Citrix ADC and Citrix GatewayCitrix	13.1 to before 13.1-45.61 Affected 13.0 to before 13.0-90.11 Affected 12.1 to before 12.1-65.35Affected 12.1-FIPS to before 12.1-55.296Affected 13.1-FIPS to before 13.1-37.150 Affected 12.1-NDcPP to before 12.1-55.296Affected

References

https://support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.