{"schemaVersion":3,"id":"CVE-2020-8193","aliases":[],"status":"published","duplicateOf":null,"title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","description":"Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.","dates":{"published":"2020-07-10T15:38:28.000Z","modified":"2025-10-21T23:35:40.928Z","reserved":null,"kevAdded":["2021-11-03T00:00:00.000Z"],"kevDue":["2022-05-03T00:00:00.000Z"]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.88269,"percentile":0.99772,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":-0.14199999999999768,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.88411},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.88269,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.88269,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.88269,"percentile":0.99772}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.88411,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.88269,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.88269,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.88269,"percentile":0.99772}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2021-11-03T00:00:00.000Z","dueDate":"2022-05-03T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","description":"Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2020-8193","label":"nvd.nist.gov/vuln/detail/CVE-2020-8193"}],"vendor":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2021-11-03T00:00:00.000Z","dueDate":"2022-05-03T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","description":"Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2020-8193","label":"nvd.nist.gov/vuln/detail/CVE-2020-8193"}],"vendor":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_8AFDF58C879BA9A0","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-284","name":"Improper Access Control","description":"The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","type":"weakness","status":"Incomplete","abstraction":"Pillar","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/284.html"},{"id":"CWE-287","name":"Improper Authentication","description":"When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/287.html"}],"affected":[{"vendor":"citrix","product":"application_delivery_controller","name":"application delivery controller","label":"application_delivery_controller","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.5, < 10.5-70.18","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.1, < 11.1-64.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 12.0, < 12.0-63.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 12.1, < 12.1-57.18","noFixRecorded":false,"fixedIn":null},{"text":"≥ 13.0, < 13.0-58.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.5, < 10.5-70.18 | ≥ 11.1, < 11.1-64.14 | ≥ 12.0, < 12.0-63.21 | ≥ 12.1, < 12.1-57.18 | ≥ 13.0, < 13.0-58.30","eol":null,"hubHref":"/vendor/citrix/application_delivery_controller"},{"vendor":"citrix","product":"gateway","name":"gateway","label":"gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.0, < 13.0-58.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.0, < 13.0-58.30","eol":null,"hubHref":"/vendor/citrix/gateway"},{"vendor":"citrix","product":"netscaler_gateway","name":"netscaler gateway","label":"netscaler_gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.5, < 10.5-70.18","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.1, < 11.1-64.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 12.0, < 12.0-63.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 12.1, < 12.1-57.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.5, < 10.5-70.18 | ≥ 11.1, < 11.1-64.14 | ≥ 12.0, < 12.0-63.21 | ≥ 12.1, < 12.1-57.18","eol":null,"hubHref":"/vendor/citrix/netscaler_gateway"},{"vendor":"citrix","product":"sd-wan_wanop","name":"sd-wan wanop","label":"sd-wan_wanop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 10.2, < 10.2.7","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0, < 11.0.3d","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.1, < 11.1.1a","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.2, < 10.2.7 | ≥ 11.0, < 11.0.3d | ≥ 11.1, < 11.1.1a","eol":null,"hubHref":"/vendor/citrix/sd-wan_wanop"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://support.citrix.com/article/CTX276688","label":"support.citrix.com/article/CTX276688","hostname":"support.citrix.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html","label":"packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local-File-Inclusion.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-07-10T15:38:28.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2021-11-03T00:00:00.000Z","label":"Added to CISA KEV","detail":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-05-03T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:35:40.928Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T17:37:43.067Z","stale":false,"partial":false}}