CVE-2020-8190 Privilege escalation in Citrix ADC, Citrix Gateway
Incorrect file permissions in Citrix ADC and Gateway allow attackers to escalate privileges on the affected network appliances.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-8190?
CVE-2020-8190 is a high-severity vulnerability in Citrix ADC, Citrix Gateway, published on 10 Jul 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Incorrect file permissions in Citrix ADC and Citrix Gateway before versions 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows privilege escalation.
Weakness: CWE-281
Which versions are affected by CVE-2020-8190?
It affects 3 products.
Products include Citrix Application Delivery Controller Firmware, Citrix Gateway Firmware, Citrix Netscaler Gateway Firmware.
How do I fix CVE-2020-8190?
No fix has been published for CVE-2020-8190 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-8190 being exploited?
There is no known exploitation of CVE-2020-8190 in the wild and no public exploit code.
Other vulnerabilities in Citrix ADC, Citrix Gateway
- CVE-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass
- CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution
- CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure
Sources
Also known as GHSA-85c5-xq3r-f3vw.