VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 26, 2022· Updated Jun 17, 2026

CVE-2019-18177

CVE-2019-18177

Description

In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update.

Affected products

5
  • Citrix Systems/ADCcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 13.0-58.30 and later releases before CTX276688 update
  • Citrix Systems/Netscaler Application Delivery Controller
    cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*
    Range: <13.0-58.30
  • Citrix Systems/Gateway2 versions
    cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:citrix:gateway:*:*:*:*:*:*:*:*range: <13.0-58.30
    • (no CPE)range: 13.0-58.30 and later releases before CTX276688 update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.