Vulnerability Details CVE-2020-10110
Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache headers on Citrix ADC. The "Via" header lists cache protocols and recipients between the start and end points for a request or a response. The "Age" header provides the age of the cached response in seconds. Both headers are commonly used for proxy cache and the information is not sensitive
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.1%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/156656/Citrix-Gateway-11.1-12.0-12.1-Information-Disclosure.html
- https://seclists.org/fulldisclosure/2020/Mar/7
- https://support.citrix.com/search
- http://packetstormsecurity.com/files/156656/Citrix-Gateway-11.1-12.0-12.1-Information-Disclosure.html
- https://seclists.org/fulldisclosure/2020/Mar/7
- https://support.citrix.com/search
Products affected by CVE-2020-10110
-
cpe:2.3:o:citrix:gateway_firmware:11.1
-
cpe:2.3:o:citrix:gateway_firmware:12.0
-
cpe:2.3:o:citrix:gateway_firmware:12.1