CVE-2020-10111

Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic for performance optimization

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

2.00% chance of exploitation in the next 30 days, 79th percentile

Published

2020-03-06

Updated

2024-08-04

Proof-of-concept exploits (1)

• http://seclists.org/fulldisclosure/2020/Mar/11

References

• CVE Record
• NVD entry

Related

• CVE-2020-10110
• CVE-2020-10112
• CVE-2020-10109
• CVE-2020-10124
• CVE-2020-10108
• CVE-2020-10128