CVE-2024-5492: Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites
Published Jul 10, 2024
·Updated
Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway
Affected Software
11 affected components
Citrix NetScaler ADC
Citrix NetScaler Gateway
Citrix NetScaler Application Delivery Controller>=12.1<12.1-55.304
Citrix NetScaler Application Delivery Controller>=12.1<12.1-55.304
Citrix NetScaler Application Delivery Controller>=12.1<13.0-92.31
Citrix NetScaler Application Delivery Controller>=13.1<13.1-37.183
Citrix NetScaler Application Delivery Controller>=13.1<13.1-53.17
Citrix NetScaler Application Delivery Controller>=14.1<14.1-25.53
Citrix NetScaler Gateway>=12.1<13.0-92.31
Citrix NetScaler Gateway>=13.1<13.1-53.17
Citrix NetScaler Gateway>=14.1<14.1-25.53
Event History
Jul 10, 2024
CVE Published
via MITRE·07:04 PM
Data Sourced
via MITRE·07:04 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Apr 11, 58462
Event
via NVD·05:43 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-5492?
CVE-2024-5492 is classified as a high severity vulnerability due to its potential for exploitation by remote attackers.
2
How do I fix CVE-2024-5492?
Fixing CVE-2024-5492 involves applying the latest patches or updates provided by Citrix for NetScaler ADC and NetScaler Gateway.
3
Who is affected by CVE-2024-5492?
CVE-2024-5492 affects users and administrators of Citrix NetScaler ADC and Citrix NetScaler Gateway.
4
What type of vulnerability is CVE-2024-5492?
CVE-2024-5492 is an open redirect vulnerability allowing attackers to redirect users to arbitrary websites.
5
Can CVE-2024-5492 be exploited remotely?
Yes, CVE-2024-5492 can be exploited remotely, allowing unauthenticated attackers to carry out redirection attacks.