An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host.

Art Manion and Will Dormann report :

By using an older and less-secure form of open(), it is possible for untrusted template files to cause reads/writes outside of the template directories. This vulnerability is a component of the recent Citrix exploit.

The version of Citrix ADC or Citrix NetScaler Gateway SSL VPN running on the remote web server is affected by a path traversal vulnerability that can lead to remote code execution. An unauthenticated, remote attacker can exploit this issue, by sending a specially crafted HTTP request to perform a path traversal that can lead to acheiving remote code execution.

The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability.
An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host.

Please refer to advisory CTX267027 for more information.

ID	Name	Product	Family	Severity
701262	Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)	Nessus Network Monitor	SNMP	critical
132879	FreeBSD : Template::Toolkit -- Directory traversal on write (2bab995f-36d4-11ea-9dad-002590acae31)	Nessus	FreeBSD Local Security Checks	critical
132752	Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027) (Direct Check)	Nessus	CGI abuses	critical
132397	Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2019-19781

critical

Tenable Plugins

critical

critical

critical

critical