CVE-2020-8190: High severity citrix netscaler application delivery controller firmware vulnerability

Q: What is CVE-2020-8190?

CVE-2020-8190 is a vulnerability in Citrix ADC and Citrix Gateway that allows privilege escalation.

Q: Which Citrix products are affected by CVE-2020-8190?

CVE-2020-8190 affects Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18.

Q: What is the severity of CVE-2020-8190?

The severity of CVE-2020-8190 is high with a CVSS score of 7.5.

Q: How can I fix CVE-2020-8190?

To fix CVE-2020-8190, you should update your Citrix ADC and Citrix Gateway to versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, or 10.5-70.18.

Q: Where can I find more information about CVE-2020-8190?

You can find more information about CVE-2020-8190 at the following link: [Citrix Support Article](https://support.citrix.com/article/CTX276688).

Published Jul 10, 2020

Updated

Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation.

Affected Software

13 affected components

Citrix Application Delivery Controller Firmware>=10.5<10.5-70.18

Citrix Application Delivery Controller Firmware>=11.1<11.1-64.14

Citrix Application Delivery Controller Firmware>=12.0<12.0-63.21

Citrix Application Delivery Controller Firmware>=12.1<12.1-57.18

Citrix Application Delivery Controller Firmware>=13.0<13.0-58.30

Citrix Application Delivery Controller

Citrix Netscaler Gateway Firmware>=10.5<10.5-70.18

Citrix Netscaler Gateway Firmware>=11.1<11.1-64.14

Citrix Netscaler Gateway Firmware>=12.0<12.0-63.21

Citrix Netscaler Gateway Firmware>=12.1<12.1-57.18

Citrix NetScaler Gateway

Citrix Gateway Firmware>=13.0<13.0-58.30

Citrix Gateway

Event History

Jul 10, 2020

CVE Published

via MITRE·03:32 PM

Data Sourced

via MITRE·03:32 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-8190?

CVE-2020-8190 is a vulnerability in Citrix ADC and Citrix Gateway that allows privilege escalation.

Which Citrix products are affected by CVE-2020-8190?

CVE-2020-8190 affects Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18.

What is the severity of CVE-2020-8190?

The severity of CVE-2020-8190 is high with a CVSS score of 7.5.

How can I fix CVE-2020-8190?

To fix CVE-2020-8190, you should update your Citrix ADC and Citrix Gateway to versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, or 10.5-70.18.

Where can I find more information about CVE-2020-8190?