Re:Hackers Were Inside Citrix for Five Months
by Spooky23 on Thursday February 20, 2020 @08:16AM
(#22374821)
The vulnerability in Netscaler was an old bug in a web server that let you trivially break out of the virtual directory.
So you could navigate to <URL>/vpn/../path and read/write files.
The device is a freaking load balancer. It took the company a month from public disclosure to push out a rule to workaround to stop most exploits on some devices, and 6 weeks to patch it. Something went horribly wrong.
Netscaler was a potential spinoff product awhile back — my guess is that they stripped the division in the anticipation of a sale to make the numbers look good.
So you could navigate to <URL>/vpn/../path and read/write files.
The device is a freaking load balancer. It took the company a month from public disclosure to push out a rule to workaround to stop most exploits on some devices, and 6 weeks to patch it. Something went horribly wrong.
Netscaler was a potential spinoff product awhile back — my guess is that they stripped the division in the anticipation of a sale to make the numbers look good.