CVE-2020-8247: 
NixOS vulnerability analysis and mitigation

A privilege escalation vulnerability (CVE-2020-8247) was identified in multiple Citrix products, including Citrix ADC, Citrix Gateway, NetScaler Gateway, and Citrix SD-WAN WANOP appliances. The vulnerability affects various versions of these products, specifically Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, NetScaler Gateway 11.1 before 11.1-65.12, and multiple versions of Citrix SD-WAN WANOP (MITRE CVE).

The vulnerability is classified under CWE-269: Improper Privilege Management, allowing potential escalation of privileges on the management interface of affected systems (Citrix Support).

The vulnerability could allow attackers to gain elevated privileges on the management interface of affected Citrix systems, potentially compromising the security of the entire appliance (MITRE CVE).

Citrix has released security updates to address this vulnerability. Users are advised to upgrade to the following versions: Citrix ADC and Gateway 13.0-64.35 or later, NetScaler Gateway 12.1-58.15 or later, Citrix ADC 12.1-FIPS-55.187 or later, and respective updated versions for SD-WAN WANOP appliances (Citrix Support).