Technical impact
Citrix NetScaler ADC and Gateway write sensitive authentication material to system log files, exposing credentials and other secret data. This flaw allows an attacker who can read the logs to retrieve authentication tokens or passwords, potentially enabling account impersonation and unauthorized access. The weakness stems from improper handling of sensitive information – a classic information exposure scenario.
Affected Systems
Devices running Citrix NetScaler ADC and Citrix NetScaler Gateway are affected. No specific version lines are provided, so any installation of these products should be examined for logging of authentication data.
Risk and Exploitability
The CVSS score of 6.9 labels the vulnerability as moderate, but the EPSS score of less than 1% indicates a low likelihood of exploitation. It is not listed in the CISA KEV catalogue. Attackers would need to obtain the log files, which are normally restricted, so internal or compromised accounts pose the greatest risk. The impact is primarily confidentiality rather than availability or integrity, yet the potential for credential compromise warrants prompt action.
