CVE-2020-10112 - CVE House
Back to Database
Status published Medium CVE-2020-10112

Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE:...

Vulnerability Description

Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for Citrix Gateway usage. No dynamic content is served under these paths, which implies that those cached pages would not change based on parameter values. All other data traffic going through Citrix Gateway are NOT cached by default

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10112

Credits & Attribution

No credits recorded in the NVD database.

References

More from citrix

View All →
CVE-2022-26151
Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and...
High 7.2
CVE-2021-44520
In Citrix XenMobile Server through 10.12 RP9, there is an...
High 8.8
CVE-2021-44519
In Citrix XenMobile Server through 10.12 RP9, there is an...
High 8.8
CVE-2020-8983
An arbitrary file write issue exists in all versions of...
High 7.5
CVE-2020-8982
An unauthenticated arbitrary file read issue exists in all versions...
High 7.5

Affected Vendor

Affected Software

gateway firmware
Vulnerable Versions:
11.1, 12.0, 12.1

Timeline

Official Publish: March 6th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.