CVE-2020-10111

Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic for performance optimization

Affected products

Citrix Adc, Citrix Gateway

Citrix Gateway Firmware

= 11.1, 12.0, 12.1

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

2.0% (79th percentile)

Weakness

CWE-444

NVD status

Modified

Published

2020-03-06