Sign In
- Platform
- Solutions
- Modern NDR
- Resources
- Company
Platform
Modern NDR
Resources
Platform
Modern NDR
Resources
DETECTION OVERVIEW
Risk Factors
Citrix NetScaler devices are exposed to the internet and the code that exploits this vulnerability is publicly available. An unauthenticated attacker can attempt to steal session tokens from a server that has unpatched versions.
Kill Chain
Risk Score
41
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway have a sensitive information disclosure vulnerability. An unauthenticated attacker can take advantage of this vulnerability by sending an HTTP request with a large amount of data (>21739 bytes) in the Host header. The victim processes the request, which results in a buffer overread. The memory beyond this buffer contains a global structure that can include a session token. When the victim sends a response with a non-200 status code or without a session token, the exploit attempt is unsuccessful.
