CVE-2020-13998: High severity citrix vulnerability
UNSUPPORTED WHEN ASSIGNED Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Citrix XenApp vulnerability?
The vulnerability ID of this Citrix XenApp vulnerability is CVE-2020-13998.
What is the severity of CVE-2020-13998?
The severity of CVE-2020-13998 is medium with a CVSS score of 5.3.
Which software version is affected by CVE-2020-13998?
Citrix XenApp version 6.5.0.0 is affected by CVE-2020-13998.
What does this vulnerability allow an attacker to do?
This vulnerability allows a remote unauthenticated attacker to ascertain whether a user exists on the server by exploiting the 2FA error page.
Is there a fix available for this vulnerability?
Since the affected software is no longer supported, there may not be an official fix available. It is recommended to upgrade to a supported version or consider alternative mitigation strategies.