Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-2049 EUVD-2024-27014GHSA-cq2x-934m-8p64

Server-Side Request Forgery (SSRF)

Published Mar 12, 2024 · Updated Apr 15, 2025 · Assigned by Citrix

Description

Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.

Affected products

VendorProductAffectedFixed
Citrix Citrix SD-WAN Standard/Premium Editions 11.4 – < 11.4.4.46 11.4.4.46

Advisories 1

References