Severity
High
Analysis Summary
CVE-2019-13608
Citrix StoreFront Server could allow a remote attacker to obtain sensitive information, caused by an XML external entity (XXE) error when processing XML data. By sending a specially-crafted XML code, a remote attacker could exploit this vulnerability to obtain sensitive information.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2019-13608
Affected Vendors
Citrix
Affected Products
Citrix StoreFront Server 1902
Citrix StoreFront Server 7.15 LTSR CU3
Citrix StoreFront Server 7.6 LTSR before CU7
Remediation
Refer to Citrix Security Advisory for patch, upgrade or suggested workaround information.