Citrix NetScaler takeovers possible with new exploit

Vulnerable Citrix NetScaler Application Delivery Controller and NetScaler Gateway instances impacted by the recently remediated critical severity Citrix Bleed information disclosure bug, tracked as CVE-2023-4966, could have their authentication session cookies stolen and be hijacked through a new proof-of-concept exploit discovered by Assetnote researchers, reports BleepingComputer.

application application delivery application delivery controller assetnote authentication bleepingcomputer bug citrix citrix netscaler concept controller cookies critical cve delivery disclosure endpointdevice-security exploit gateway hijacked information information disclosure netscaler netscaler gateway proof proof-of-concept reports researchers security-staff-acquisition-development session severity stolen takeovers vulnerability management vulnerable