CVE-2023-4966: Exploitation of Citrix NetScaler Information Disclosure Vulnerability

On October 10, 2023, Citrix published an advisory on two vulnerabilities affecting NetScaler ADC and NetScaler Gateway. The more critical of these is CVE-2023-4966, a sensitive information disclosure vulnerability that allows an attacker to read large amounts of memory after the end of a buffer.

adc advisory attacker buffer citrix citrix netscaler critical cve disclosure emergent threat response end exploitation gateway information information disclosure information disclosure vulnerability large memory netscaler netscaler adc netscaler gateway october sensitive sensitive information vulnerabilities vulnerability vulnerability risk management