CVE-2023-4967 2

Vulnerability (CVE)

Threat Brief: Citrix Bleed CVE-2023-4966

Citrix patched CVE-2023-4966, known as Citrix Bleed, in NetScaler ADC and NetScaler Gateway on Oct. 10, 2023; the flaw lets an unauthenticated attacker steal session tokens via a crafted request and hijack sessions, and carries a CVSS score of 9.4. Unit 42...

Detection & Response

CVE-2023-4966 Helps Usher In A Baker’s Dozen Of Citrix Tags To Further Help Organizations Mitigate Harm | Grey Noise Blog

Cyber Risks GreyNoise Blog

GreyNoise added detection tag coverage on October 23, 2023 for CVE-2023-4966, an information disclosure flaw in Citrix NetScaler ADC and NetScaler Gateway that lets an unauthenticated attacker hijack an existing authenticated session when the device is...

Vulnerabilities & Patching