Description

Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources

INFO

Published Date :

2024-11-12T18:28:51.398Z

Last Modified :

2024-11-21T16:18:12.855Z

Source :

Citrix
AFFECTED PRODUCTS

The following products are affected by CVE-2024-8535 vulnerability.

Vendors Products
Citrix
  • Netscaler Application Delivery Controller
  • Netscaler Gateway
Netscaler
  • Adc
  • Gateway
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-8535.

URL Resource
https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact