← Back to CVEs
CVE-2020-10110
MEDIUM5.3
Description
Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache headers on Citrix ADC. The "Via" header lists cache protocols and recipients between the start and end points for a request or a response. The "Age" header provides the age of the cached response in seconds. Both headers are commonly used for proxy cache and the information is not sensitive
CVE Details
CVSS v3.1 Score5.3
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published3/6/2020
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
citrix:gateway_firmware
References
http://packetstormsecurity.com/files/156656/Citrix-Gateway-11.1-12.0-12.1-Information-Disclosure.html(cve@mitre.org)
https://seclists.org/fulldisclosure/2020/Mar/7(cve@mitre.org)
https://support.citrix.com/search(cve@mitre.org)
http://packetstormsecurity.com/files/156656/Citrix-Gateway-11.1-12.0-12.1-Information-Disclosure.html(af854a3a-2127-422b-91ae-364da2661108)
https://seclists.org/fulldisclosure/2020/Mar/7(af854a3a-2127-422b-91ae-364da2661108)
https://support.citrix.com/search(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.