CVE-2023-24487: 
NixOS vulnerability analysis and mitigation

An arbitrary file read vulnerability (CVE-2023-24487) was identified in Citrix ADC (Application Delivery Controller) and Citrix Gateway products. The vulnerability was initially recorded on January 24, 2023, and was publicly disclosed on July 10, 2023. The affected products include multiple versions of Citrix ADC and Gateway, specifically versions 12.1, 13.0, and 13.1 (CVE MITRE).

The vulnerability has received a CVSS v3.1 base score of 7.5 (HIGH) from NIST with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, while Citrix assessed it with a score of 6.3 (MEDIUM) with vector string CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. The vulnerability is associated with CWE-253 (Incorrect Check of Function Return Value) as reported by Citrix Systems, Inc (NVD NIST).

The vulnerability allows unauthorized access to read arbitrary files on the affected systems, potentially exposing sensitive information. The high confidentiality impact rating in the NIST CVSS score indicates significant potential for data exposure (NVD NIST).