Vulnerability Intelligence Report

CVE-2020-8197

Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access to execute arbitrary commands.

No Active Exploit Signals

CVSS Base Score

8.8

HIGH

EPSS Probability:1.82%

Executive Threat Verdict

Evaluating...

Evaluating Threat Landscape...

Assessing known weaponization, exploitation telemetry, and federal advisories.

Attack Surface

—

Authentication

—

Weaponization

—

SSVC Action

—

Weaknesses (CWE)

Affected Products & Versions

Vendor	Product	Affected Versions
No affected products specified.

Exploitation & Remediation

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗

No reference links found.

Threat Intelligence Signals

EPSS Score

1.819%

GitHub Advisory

GHSA-3pmx-3w59-68p8 ↗

CVSS Vector Breakdown

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality

Integrity

Availability

Identity & Timeline

Status	PUBLISHED
Assigning Authority	HackerOne · Bug Bounty Provider · USA
Reserved	2020-01-28T00:00:00
Published	2020-07-10T15:40:09
Last Updated	2024-08-04T09:56:27

MITRE ATT&CK Mapping

Tactics

Techniques

CVE-2020-8197

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

CVE-2020-8197

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

Community Chatter & Buzz

Related Intelligence

SHARE INTELLIGENCE WIRE