Citrix
Top 10K siteProgram Details
- Handle
- csg-public
- Managed
- No
Response Metrics
- Bounty Time
- 249 days
Scope (17 targets)
web: 10 mobile: 2 other: 5 In Scope
- *.citrixworkspacesapi.net web bounty-eligible
- *developer.cloud.com web recognition only
- Citrix End Point Analysis (EPA) client for Linux other bounty-eligible
- Citrix End Point Analysis (EPA) client for Windows other bounty-eligible
- Citrix Secure Access client for Android mobile bounty-eligible
- Citrix Secure Access client for Linux other bounty-eligible
- Citrix Secure Access client for Windows other bounty-eligible
- Citrix Secure Access client for iOS other bounty-eligible
- Citrix Secure Access client for macOS mobile bounty-eligible
- accounts.cloud.com web bounty-eligible
- adm.cloud.com web bounty-eligible
- ap-s.cloud.com web bounty-eligible
- api.adm.cloud.com web bounty-eligible
- eu.cloud.com web bounty-eligible
- onboarding-*.cloud.com web bounty-eligible
- onboarding.cloud.com web bounty-eligible
- us.cloud.com web bounty-eligible
Out of Scope
(youriwssubdomain).cloud.com, (yoursubdomain).ap.iws.cloud.com, (yoursubdomain).eu.iws.cloud.com, (yoursubdomain).us.iws.cloud.com, *.browser.cloud.com, *.citrix*.com, *.cloudburrito.com, *.podio.com, *.securevdr.com, *.xmdev.cloud.com, *.xmqa.cloud.com, *.xmtest.cloud.com, accounts-internal.cloud.com, citrix.cloud.com, launch.cloud.com, www.cloud.com
Known Exploited Vulnerabilities 27CVEs
7 linked to ransomware campaigns
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service
Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.
Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service.
Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.
Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.
Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.
Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.