CVE-2019-12990

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal

published July 16, 2019

CVSS
โ€”
EPSS
39%
Percentile
98.6
In the wild
Unconfirmed
What it is

โš ๏ธ A sneaky directory traversal bug lurks in older Citrix SD-WAN versions, allowing an attacker to peek beyond the intended file system boundaries! ๐Ÿ” Think of it like a hotel guest who discovers a hidden door in their room that leads directly to the staff area โ€” once they're in, they can snoop around unrestricted. ๐Ÿจ If exploited, this vulnerability could let attackers access sensitive files and directories that should be off-limits, potentially exposing critical system information. While it's not known to be actively exploited, the possibility of unauthorized access is absolutely concerning!

Put simply

Think of it like a hotel guest who discovers a hidden door in their room that leads directly to the staff area โ€” once they're in, they can snoop around unrestricted. ๐Ÿจ This directory traversal flaw in Citrix SD-WAN versions 10.2.x before 10.2.3 and 10.0.x before 10.0.8 allows attackers to navigate to directories beyond the intended scope, exposing files on the server.

What to do

If exploited, this vulnerability could let attackers access sensitive files and directories that should be off-limits, potentially exposing critical system information. While it's not known to be actively exploited, the possibility of unauthorized access is absolutely concerning! To protect your systems, update Citrix SD-WAN to version 10.2.3 or 10.0.8 as soon as possible. Regularly audit your configuration settings and monitor for any unusual access patterns. ๐Ÿ›ก๏ธ You've got this! With these updates, you can close the door on potential intruders and keep your network secure! ๐Ÿ’ช๐Ÿ˜Š

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.39335 ยท 98.6th percentile
Published
2019-07-16T17:29Z
EPSS history
Timeline
  • 22 SEP 03:17Z
    EPSS moved 39% โ†’ 18%
    epss
  • 06 SEP 03:12Z
    EPSS moved 39% โ†’ 18%
    epss
  • 30 AUG 16:01Z
    EPSS moved 18% โ†’ 39%
    epss
  • 29 AUG 04:46Z
    EPSS moved 39% โ†’ 18%
    epss
  • 16 JUL 17:29Z
    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal
    cvelistv5