Protection for Citrix vulnerability CVE-2019-19781

[RREALICA]

Hi,

Is there any official word when PA will get protection for CVE-2019-19781 - Vulnerability in Citrix Application Delivery Controller and Citrix Gateway?

https://support.citrix.com/article/CTX267027

Thanks.

[Rajesh12]

@RREALICA 

PA have not released signature for this vulnerability yet. But you can monitor it at threat vault.

https://threatvault.paloaltonetworks.com/

[zachzoom]

I don't see anything in threat vault for that CVE...is that because there is no signature yet and it will show up when there is one?

[Rajesh12]

@zachzoom 

Yes, it will show up in Threat Vault when once PA defined signatures for it.

[RREALICA]

fyi in case anyone is interested: SANS Webcasst: What you Need To Know About The Critical Citrix Gateway (Netscaler) Vulnerability CVE-2019-19781

https://www.sans.org/webcasts/about-critical-citrix-gateway-netscaler-vulnerability-cve-2019-19781-1...

[Anon1]

Signature is released in content update 8224.

[twan.hermans]

Hi,

As there is an signature sinds a couple of days, i indeed see some hits, and reset actions.  But i wonder how the palo will detect this vulnerability, because we don't have ssl decryption enabled, and our citrix is only available on https.

Does anyone have some theorie ?

Best regards,

Twan Hermans