CVE-2020-8196: 
Citrix ADC VPX vulnerability analysis and mitigation

CVE-2020-8196 is an information disclosure vulnerability affecting Citrix ADC (formerly NetScaler ADC), Citrix Gateway, and Citrix SD-WAN WANOP appliance versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14, and 10.5-70.18. The vulnerability was disclosed on July 7, 2020, and allows limited information disclosure to low privileged users (Citrix Blog).

The vulnerability exists in the management interface of the device's NSIP (NetScaler IP) address. When exploited, an authenticated user on the NSIP can access sensitive information through specially crafted HTTP requests (Tenable Blog).

If successfully exploited, the vulnerability could lead to unauthorized access to sensitive information on affected Citrix devices. The impact is considered significant as it could potentially expose configuration files and other critical system information to attackers (Tenable Blog).

Citrix has released patches to address this vulnerability. Organizations should upgrade to the following fixed versions: Citrix ADC and Gateway version 13.0-58.30 or later, 12.1-57.18 or later, 12.0-63.21 or later, 11.1-64.14 or later, and 10.5-70.18 or later. For Citrix SD-WAN WANOP, upgrade to versions 11.1.1a or later, 11.0.3d or later, or 10.2.7 or later (Citrix Blog).

The security community responded quickly to the disclosure, with researchers like NCC Group's Research and Intelligence Fusion Team (RIFT) confirming exploitation in the wild. The quick turnaround time from disclosure to exploitation matched similar patterns observed with other critical vulnerabilities in network infrastructure products (Tenable Blog).