Citrix Gateway Plug-In For Linux vulnerabilities

2 known vulnerabilities affecting citrix/gateway_plug-in_for_linux.

Total CVEs

2

CISA KEV

1

actively exploited

Public exploits

1

Exploited in wild

1

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-8199HIGHCVSS 7.8fixed in 1.0.0.1372020-07-10

CVE-2020-8199 [HIGH] CVE-2020-8199: Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in loca Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root.

CVE-2020-8195MEDIUMCVSS 6.5KEVPoCfixed in 1.0.0.1372020-07-10

CVE-2020-8195 [MEDIUM] CWE-20 CVE-2020-8195: Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 1 Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.