3 ms·
Also F5 or Citrix: some of their core security products had 90s-style C exploits and other signs of development practices well behind the times - roughly at the
by acdha 3y ago
Also F5 or Citrix: some of their core security products had 90s-style C exploits and other signs of development practices well behind the times - roughly at the level of going to surgery and seeing your surgeon not washing their hands in the bathroom.
https://www.cisa.gov/guidance-addressing-citrix-netscaler-adc-and-gateway-vulnerability-cve-2023-4966-citrix-bleed https://www.cisa.gov/guidance-addressing-citrix-netscaler-ad...
https://www.mandiant.com/resources/blog/session-hijacking-citrix-cve-2023-4966 https://www.mandiant.com/resources/blog/session-hijacking-ci...
https://www.fortinet.com/blog/threat-research/defending-against-critical-f5-vulnerabilities https://www.fortinet.com/blog/threat-research/defending-agai...
https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-138a https://www.cisa.gov/news-events/cybersecurity-advisories/aa...