VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jun 11, 2020· Updated Jun 17, 2026

CVE-2020-13998

CVE-2020-13998

Description

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Citrix Systems/Xenapp2 versions
    cpe:2.3:a:citrix:xenapp:6.5.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:citrix:xenapp:6.5.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 6.5
  • Citrix/XenAppdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.