Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
Source: Cloudflare Security
At a glance
The recent disclosure of a major vulnerability in Citrix NetScaler pointed to a widespread weak point: a login page is an attack surface that can be used to compromise and access an application server. Indeed, the disclosures included an actively exploited flaw that allowed attackers to execute commands on affected gateways without signing in. As with any emergency patch, admins had to weigh cutting off or disrupting their users’ access with the risk of delaying a critical security update. If you’re a NetScaler customer and you haven’t patched your instance, stop reading and go do that. This …