Protection for Citrix vulnerability CVE-2019-19781

Announcements
Attention: The LIVEcommunity is experiencing an interruption with videos in some areas. We apologize for any inconvenience this may cause. Thank you for your patience as we work towards a solution to restore videos.
Reply
Highlighted
L1 Bithead

Protection for Citrix vulnerability CVE-2019-19781

Hi,

 

Is there any official word when PA will get protection for CVE-2019-19781 - Vulnerability in Citrix Application Delivery Controller and Citrix Gateway?

https://support.citrix.com/article/CTX267027

 

Thanks.

Highlighted
L2 Linker

Re: Protection for Citrix vulnerability CVE-2019-19781

@RREALICA 

 

PA have not released signature for this vulnerability yet. But you can monitor it at threat vault.

 

https://threatvault.paloaltonetworks.com/

Highlighted
L0 Member

Re: Protection for Citrix vulnerability CVE-2019-19781

I don't see anything in threat vault for that CVE...is that because there is no signature yet and it will show up when there is one?

Highlighted
L2 Linker

Re: Protection for Citrix vulnerability CVE-2019-19781

@zachzoom 

 

Yes, it will show up in Threat Vault when once PA defined signatures for it.

Highlighted
L1 Bithead

Re: Protection for Citrix vulnerability CVE-2019-19781

fyi in case anyone is interested: SANS Webcasst: What you Need To Know About The Critical Citrix Gateway (Netscaler) Vulnerability CVE-2019-19781

 

https://www.sans.org/webcasts/about-critical-citrix-gateway-netscaler-vulnerability-cve-2019-19781-1...

 

 

Highlighted
L4 Transporter

Re: Protection for Citrix vulnerability CVE-2019-19781

Signature is released in content update 8224.

Highlighted
L0 Member

Re: Protection for Citrix vulnerability CVE-2019-19781

Hi,

 

As there is an signature sinds a couple of days, i indeed see some hits, and reset actions.  But i wonder how the palo will detect this vulnerability, because we don't have ssl decryption enabled, and our citrix is only available on https.

 

Does anyone have some theorie ?

 

Best regards,

Twan Hermans

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!