{"schema":"threatline.record/2","record":{"id":"CVE-2020-8193","aliases":[],"summary":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","details":"Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.","categories":["Network & edge"],"product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vendor":"Citrix","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-8193","source_modified_at":"2025-10-21T23:35:40.928Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP","vendor":"n/a","versions":[{"status":"affected","version":"Citrix ADC and Citrix Gateway 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP 11.1.1a, 11.0.3d and 10.2.7"}],"defaultStatus":null}],"fixed_versions":[],"cvss":6.5,"severity":"Medium","kev":{"listed":true,"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.88269,"percentile":0.99773,"score_date":"2026-10-23"},"published_at":"2020-07-10T15:38:28.000Z","modified_at":"2025-10-21T23:35:40.928Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2020-8193","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-21T23:35:40.928Z"},{"source":"Nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8193.yaml","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-8193","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Nuclei","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8193","source":"CISA KEV"},{"source":"CVE List","url":"https://support.citrix.com/article/CTX276688","tags":["x_refsource_MISC","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8193","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"partial","assessed_at":"2025-02-07T12:35:04.938931Z"},"exploits":[{"source":"Nuclei","kind":"Scanner template","name":"Citrix - Local File Inclusion","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8193.yaml"}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-21T23:35:40.928Z","content_hash":"6c97a5275cbbe74681bc713e06daea7dae94558b07ebd1bcae74575f4d7d56e7"}}