CITRIX WARNS ADMINS TO PATCH CITRIX BLEED

Summary from the TLDR InfoSec newsletter

Citrix warns all admins of Netscaler ADC and Gateway appliances to immediately secure their systems from an actively exploited vulnerability dubbed Citrix Bleed (CVE-2023-4966). The 9.4 vulnerability allows unauthenticated attackers to launch a low complexity attack to remotely disclose session tokens and hijack authenticated sessions with no user interaction. This article includes commands to kill all sessions and details of the patched versions.