Unauthorized Access in NetScaler ADC and Gateway by Citrix

CVE-2024-8535

Summary

Authenticated users may exploit a configuration flaw in Citrix NetScaler ADC and NetScaler Gateway, which allows unintended access to user capabilities. This vulnerability arises when the appliance is configured as a Gateway or Auth Server with specific Kerberos SSO settings, enabling unauthorized access to backend resources. Proper configuration and timely updates are crucial to mitigating potential attacks related to this access control issue.

News Articles

NetScaler

CVE-2024-8534CVE-2024-8535

High severity security updates available for NetScaler

Cloud Software Group has released builds to fix CVE-2024-8534 and CVE-2024-8535, which affect NetScaler ADC and NetScaler Gateway.

References