CVE-2020-13998

5.3MEDIUM

Key Information

Vendor: Citrix
Status: Xenapp
Vendor: CVE Published:; 11 June 2020

Summary

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 11, 2020
Vulnerability Reserved.
Jun 9, 2020

Collectors

NVD DatabaseMitre Database