CVE-2024-8535
Nov. 21, 2024, 5:15 p.m.
None
No Score
Description
Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources
Product(s) Impacted
| Product | Versions |
|---|---|
| NetScaler ADC |
|
| NetScaler Gateway |
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
CWE-552
Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.
Tags
Timeline
Published: Nov. 12, 2024, 7:15 p.m.
Last Modified: Nov. 21, 2024, 5:15 p.m.
Last Modified: Nov. 21, 2024, 5:15 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
secure@citrix.com
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.