5.9

CVE-2019-6485

Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery Controller (ADC) 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 allow remote attackers to obtain sensitive plaintext information because of a TLS Padding Oracle Vulnerability when CBC-based cipher suites are enabled.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Netscaler Gateway Firmware Version 10.5
   Citrix ≫ NetScaler Gateway Version -
Citrix ≫ Netscaler Gateway Firmware Version 11.0
   Citrix ≫ NetScaler Gateway Version -
Citrix ≫ Netscaler Gateway Firmware Version 11.1
   Citrix ≫ NetScaler Gateway Version -
Citrix ≫ Netscaler Gateway Firmware Version 12.0
   Citrix ≫ NetScaler Gateway Version -
Citrix ≫ Netscaler Gateway Firmware Version 12.1
   Citrix ≫ NetScaler Gateway Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.31% 0.818
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

http://www.securityfocus.com/bid/106783
Third Party Advisory
VDB Entry
https://github.com/RUB-NDS/TLS-Padding-Oracles
Third Party Advisory
Product
https://support.citrix.com/article/CTX240139
Patch
Vendor Advisory
Mitigation