NetSight
medium6.5

CVE-2020-8200

Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Ci…

Impact

Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server.

Affected products

VendorProductAffected versions
CitrixStorefront Server
before 2006
from 3.0 before 3.0.8001
from 3.12 before 3.12.5001
from 1912 before 1912.0.1000

Weakness classification

References