high7.5
CVE-2020-10111
Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests.
Impact
Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic for performance optimization
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Gateway Firmware | Versions 11.1, 12.0, 12.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/156661/Citrix-Gateway-11.1-12.0-12.1-Cache-Bypass.html
- http://seclists.org/fulldisclosure/2020/Mar/11
- https://support.citrix.com/search
- http://packetstormsecurity.com/files/156661/Citrix-Gateway-11.1-12.0-12.1-Cache-Bypass.html
- http://seclists.org/fulldisclosure/2020/Mar/11
- https://support.citrix.com/search