{"uuid": "8b35afa7-7afc-4b63-bb8d-225926f093a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4966", "type": "published-proof-of-concept", "source": "https://t.me/ptswarm/191", "content": "Citrix Bleed: Leaking Session Tokens with CVE-2023-4966\n\n\ud83d\udc64 by Dylan Pindur\n\nIt's time for another round Citrix Patch Diffing! Earlier this month Citrix released a security bulletin which mentioned \"unauthenticated buffer-related vulnerabilities\" and two CVEs. These issues affected Citrix NetScaler ADC and NetScaler Gateway.\n\nResearchers were interested in CVE-2023-4966, which was described as \"sensitive information disclosure\" and had a CVSS score of 9.4. The high score for an information disclosure vulnerability and the mention of \"buffer-related vulnerabilities\" piqued their interest. Their goal was to understand the vulnerability and develop a check for their Attack Surface Management platform.\n\n\ud83d\udcdd Contents:\n\u25cf Introduction\n\u25cf Patch Diffing\n\u25cf Finding the Vulnerable Function\n\u25cf Exploiting the Endpoint\n\u25cf Verifying the Session Token\n\u25cf Final Thoughts\n\nhttps://www.assetnote.io/resources/research/citrix-bleed-leaking-session-tokens-with-cve-2023-4966", "creation_timestamp": "2023-10-24T10:37:53.000000Z"}