{"id":"CVE-2020-8196","kind":"vulnerability","aliases":["CVE-2020-8196"],"related":[],"title":"Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","description":"Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.","summary":"Citrix ADC, Citrix Gateway and SD-WAN WANOP appliances leak information through an unspecified flaw. Public reports tie it to unauthenticated reads of sensitive data from the appliance, which can aid further attacks.","severity":"medium","cvss":4.3,"epss":0.26333,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["citrix","exploited","infrastructure","netscaler","sd-wan","self-hosted"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the Citrix update for affected ADC, Gateway and SD-WAN WANOP firmware per vendor instructions (CISA KEV required action); exact fixed versions are unknown from these sources.","status":"open","published_at":"2020-07-10T16:15:12+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:43:37+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-23T21:43:37Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Citrix update for affected ADC, Gateway and SD-WAN WANOP firmware per vendor instructions (CISA KEV required action); exact fixed versions are unknown from these sources.\nunknown","reach":"internet","impact":"medium","summary":"Citrix ADC, Citrix Gateway and SD-WAN WANOP appliances leak information through an unspecified flaw. Public reports tie it to unauthenticated reads of sensitive data from the appliance, which can aid further attacks.","category":"infrastructure","who_cares":["citrix","netscaler","sd-wan","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker reads sensitive appliance information, possibly enabling further compromise","analyst_note":"Find the Citrix security bulletin for CVE-2020-8196 and the list of fixed firmware versions and check the exact data exposed; KEV listing confirms active exploitation.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000494,"input_tokens":2910,"output_tokens":406,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the Citrix security bulletin for CVE-2020-8196 and the list of fixed firmware versions and check the exact data exposed; KEV listing confirms active exploitation.","search":"'-2020':26A,29A '-57.18':101C '-58.30':99C '-63.21':103C '-64.14':105C '-70.18':108C '-8196':27A,30A '10.2.7':122C '10.5':107C '11.0.3':119C '11.1':104C '11.1.1':117C '12.0':102C '12.1':100C '13.0':98C 'access':88C 'adc':5A,14A,35A,54B,92C 'aid':84B 'and':37A 'applianc':12A,21A,62B,81B 'appliance':42A 'applic':2A 'application':32A 'attack':86B 'citrix':1A,13A,31A,43B,53B,55B,91C,94C,110C 'control':4A,89C 'controller':34A 'cve':25A,28A 'd':120C 'data':78B 'deliveri':3A 'delivery':33A 'disclosur':23A,127C 'exploit':44B 'flaw':68B 'gateway':6A,15A,36A,56B,95C 'host':52B 'improp':87C 'inform':22A,64B,126C 'infrastructur':45B 'leak':63B 'limit':125C 'low':129C 'netscal':46B 'op':114C 'privileg':130C 'public':69B 'read':75B 'report':70B 'result':123C 'sd':9A,18A,39A,48B,59B 'sd-wan':8A,17A,38A,47B,58B 'sdwan':111C 'self':51B 'self-host':50B 'sensit':77B 'tie':71B 'unauthent':74B 'unspecifi':67B 'user':131C 'version':96C,115C 'vulner':24A 'wan':10A,19A,40A,49B,60B,113C 'wan-op':112C 'wanop':11A,20A,41A,61B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-07-10T16:15:12+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-8196","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-8196","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T15:39:44+00:00","note":null},{"source":"epss","external_id":"CVE-2020-8196","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-8196","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-8196","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8196","severity":null,"published_at":"2020-07-10T16:15:12+00:00","modified_at":"2026-06-17T03:26:02+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}