Citrix Update
2630Warning Date
Severity Level
Warning Number
Target Sector
14 October, 2020
● High
2020-1923
All
Description:
Citrix has released security update to address multiple vulnerabilities in the following products:
- Citrix Gateway Plug-in
- 13.0 for Windows before 64.35
- 12.1 for Windows before 59.16
- 12.1 for Windows before 55.190
- Citrix ADC and Citrix Gateway 13.0
- before 64.35
- NetScaler ADC and NetScaler Gateway 12.1
- before 59.16
- Citrix ADC 12.1-FIPS
- before 55.190
Threats:
Attacker could exploit these vulnerabilities by escalating their privilege level to SYSTEM.
Best practice and Recommendations:
The CERT team encourages users to update the affected versions and to review Citrix security advisory: