Title

Citrix Access Gateway Cross-Site Scripting Vulnerability (Cat II impact)

Discussion

Citrix has released a security advisory addressing a vulnerability in Citrix Access Gateway Enterprise Edition. To exploit this vulnerability, an attacker would entice a user to open a malicious web link sent via email or other distribution method. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code and compromise the affected system. At this time, there are no known exploits associated with this vulnerability; USCYBERCOM is not aware of any DoD related incidents.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-30070

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.