CVE-2024-2049CWE-918

Server-Side Request Forgery (SSRF)

Medium · published March 12, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
29.4
In the wild
Unconfirmed
What it is

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.4th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-03-12T12:39Z
EPSS history
Timeline
  • 12 MAR 12:39Z
    Server-Side Request Forgery (SSRF)
    cvelistv5