CVE-2019-19781— Citrix Application Delivery Controller和Citrix Systems Gateway 路径遍历漏洞
一分钟漏洞结论
影响对象
n/a n/a
利用判断
已确认在野利用，应立即处置
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Citrix Systems NetScaler Gateway（Citrix Systems Gateway）和Citrix Application Delivery Controller（ADC）都是美国思杰系统（Citrix Systems）公司的产品。Citrix Systems NetScaler Gateway是一套安全的远程接入解决方案。该方案可为管理员提供应用级和数据级管控功能，以实现用户从任何地点远程访问应用和数据。Citrix Application Delivery Controll
公开利用映射 6
Nuclei · 1
CVE-2019-19781.yaml [template]
已观察到在野利用
cisa_kev · confirmed
可能的 ATT&CK 技术 1 AI
T1083 · File and Directory Discovery
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2019-19781 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Citrix Application Delivery Controller和Citrix Systems Gateway 路径遍历漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Citrix Systems NetScaler Gateway（Citrix Systems Gateway）和Citrix Application Delivery Controller（ADC）都是美国思杰系统（Citrix Systems）公司的产品。Citrix Systems NetScaler Gateway是一套安全的远程接入解决方案。该方案可为管理员提供应用级和数据级管控功能，以实现用户从任何地点远程访问应用和数据。Citrix Application Delivery Controll
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
二、漏洞 CVE-2019-19781 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ] | https://github.com/projectzeroindia/CVE-2019-19781 | POC详情 |
| 2 | This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first. | https://github.com/trustedsec/cve-2019-19781 | POC详情 |
| 3 | Test a host for susceptibility to CVE-2019-19781 | https://github.com/cisagov/check-cve-2019-19781 | POC详情 |
| 4 | Citrix ADC Remote Code Execution | https://github.com/jas502n/CVE-2019-19781 | POC详情 |
| 5 | Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ] | https://github.com/ianxtianxt/CVE-2019-19781 | POC详情 |
| 6 | CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit | https://github.com/mpgn/CVE-2019-19781 | POC详情 |
| 7 | CVE-2019-19781 Citrix RCE | https://github.com/oways/CVE-2019-19781 | POC详情 |
| 8 | Took at stab at an NSE discovery script for CVE-2019-19781. | https://github.com/becrevex/Citrix_CVE-2019-19781 | POC详情 |
| 9 | All Working Exploits | https://github.com/unknowndevice64/Exploits_CVE-2019-19781 | POC详情 |
| 10 | A fast multi threaded scanner for Citrix ADC (NetScaler) CVE-2019-19781 - Citrixmash / Shitrix | https://github.com/haxrob/citrixmash_scanner | POC详情 |
| 11 | My working exploit script for Shitrix (CVE-2019-19781) | https://github.com/jamesjguthrie/Shitrix-CVE-2019-19781 | POC详情 |
| 12 | DFIR notes for Citrix ADC (NetScaler) appliances vulnerable to CVE-2019-19781 | https://github.com/haxrob/CVE-2019-19781 | POC详情 |
| 13 | Citrix Netscaler RCE | https://github.com/hollerith/CVE-2019-19781 | POC详情 |
| 14 | Automated script for Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API. You must have a Shodan account to use this script. | https://github.com/aqhmal/CVE-2019-19781 | POC详情 |
| 15 | Detect and log CVE-2019-19781 scan and exploitation attempts. | https://github.com/MalwareTech/CitrixHoneypot | POC详情 |
| 16 | The exploitation module for the CVE-2019-19781 #Shitrix (Vulnerability in Citrix Application Delivery Controller and Citrix Gateway). | https://github.com/mekhalleh/citrix_dir_traversal_rce | POC详情 |
| 17 | None | https://github.com/zenturacp/cve-2019-19781-web | POC详情 |
| 18 | Check your website for CVE-2019-19781 Vulnerable | https://github.com/zgelici/CVE-2019-19781-Checker | POC详情 |
| 19 | IOCs for CVE-2019-19781 | https://github.com/digitalshadows/CVE-2019-19781_IOCs | POC详情 |
| 20 | Automated forensic script hunting for cve-2019-19781 | https://github.com/onSec-fr/CVE-2019-19781-Forensic | POC详情 |
| 21 | This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information | https://github.com/DanielWep/CVE-NetScalerFileSystemCheck | POC详情 |
| 22 | None | https://github.com/Castaldio86/Detect-CVE-2019-19781 | POC详情 |
| 23 | Check ADC for CVE-2019-19781 | https://github.com/j81blog/ADC-19781 | POC详情 |
| 24 | 批量概念驗證用 | https://github.com/b510/CVE-2019-19781 | POC详情 |
| 25 | CVE-2019-19781 Attack Triage Script | https://github.com/redscan/CVE-2019-19781 | POC详情 |
| 26 | CVE-2019-19781 bash exploit | https://github.com/ynsmroztas/citrix.sh | POC详情 |
| 27 | Código desenvolvido para a verificação em massa da vulnerabilidade CVE-2019-19781 de hosts descobertos pelo Shodan. Pull requests são bem vindas. | https://github.com/digitalgangst/massCitrix | POC详情 |
| 28 | Indicator of Compromise Scanner for CVE-2019-19781 | https://github.com/mandiant/ioc-scanner-CVE-2019-19781 | POC详情 |
| 29 | Indicator of Compromise Scanner for CVE-2019-19781 | https://github.com/citrix/ioc-scanner-CVE-2019-19781 | POC详情 |
| 30 | Citrix ADC (NetScaler) Honeypot. Supports detection for CVE-2019-19781 and login attempts | https://github.com/haxrob/citrix-honeypot | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2019-19781 的情报信息
请登录查看更多情报信息。
CVE-2019-19781 厂商安全公告 (1)
CVE-2019-19781 公开利用代码 (5)
CVE-2019-19781 其他参考 (4)
-
https://support.citrix.com/article/CTX267027 x_refsource_CONFIRM
-
https://twitter.com/bad_packets/status/1215431625766424576 x_refsource_MISC
-
https://forms.gle/eDf3DXZAv96oosfj6 x_refsource_MISC
同批安全公告 · n/a · 2019-12-27 · 共 66 条
| CVE-2016-1000028 | Tenable Network Security Nessus 跨站脚本漏洞 | |
| CVE-2019-20013 | GNU LibreDWG 资源管理错误漏洞 | |
| CVE-2019-20012 | GNU LibreDWG 资源管理错误漏洞 | |
| CVE-2019-20011 | GNU LibreDWG 缓冲区错误漏洞 | |
| CVE-2019-20043 | WordPress 安全漏洞 | |
| CVE-2019-20042 | WordPress 跨站脚本漏洞 | |
| CVE-2019-20041 | WordPress 输入验证错误漏洞 | |
| CVE-2014-4523 | WordPress Easy Career Openings 跨站脚本漏洞 | |
| CVE-2014-4525 | WordPress Ebay Feeds 跨站脚本漏洞 | |
| CVE-2014-4559 | WordPress Swipe Checkout for WP e-Commerce 跨站脚本漏洞 | |
| CVE-2019-20016 | libmysofa 缓冲区错误漏洞 | |
| CVE-2016-1000029 | Tenable Network Security Nessus 跨站脚本漏洞 | |
| CVE-2019-16896 | K7 Computing Ultimate Security 后置链接漏洞 | |
| CVE-2013-4691 | Sencha Labs Connect 跨站脚本漏洞 | |
| CVE-2013-4664 | SPBAS Business Automation Software 跨站脚本漏洞 | |
| CVE-2013-4665 | SPBAS Business Automation Software 跨站请求伪造漏洞 | |
| CVE-2013-4693 | WordPress Xorbin Digital Flash Clock 跨站脚本漏洞 | |
| CVE-2013-4695 | Winamp 安全漏洞 | |
| CVE-2013-4692 | Xorbin Analog Flash Clock 跨站脚本漏洞 | |
| CVE-2013-4763 | Samsung Galaxy S3和Samsung Galaxy S4 安全漏洞 |
显示前 20 条，共 66 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-19781
暂无评论