Quick Check to be safe against the latest CVE which dropped now

There's been too calm on this front for quite a while ... 😐

Not many RDP proxy/KCD implementations about so alot of noise for something that won't impact a lot of companies. People see Netscaler gateway and ICA proxy and VPN in the description and seem to think they are impacted

I have seen a number of appliances where RDP Proxy is enabled because people either planned on using it, or haven't known what the are doing and just enable everything out of the box. So we are still checking every customer's NetScalers just to be sure.

Wonder what happened to 13.1-56.x which was scheduled for 14th of november 🤔

@Eirik Vesterhus / Intility AS, I was expecting that one as well. It should contain a fix I’m after (OAuth IdP supporting umlaut chars in password)

So we have a deployment where they published MSTSC.EXE as an application, I always wondered why they didn't use RDP proxy 🙂 For one customer I did an KCD implementation, that was lots of fun to get working so I hope the update doesn't break anything. We'll find out tonight...

I heard a PoC was released last night for this... so the criticality just went up where the feature is in use

We have quite a few customers using RDP Proxy, so it's not as rare as you might think!

Curious to know if waf module could protect from this ?

Anybody noticed the version/date mismatch? So 34.42 already includes the CVE fix? 😵‍💫

Saw that too, unless they held back 29.72 until they could confirm it.. and then also included it in 34.42. But that's a guess. 😄

the 13.1-55.34 version was built on 24/10, so they already had it fixed on the 28th yes. Probably rereleased 29.72

We just upgraded to 13.1 55.34 via ADM, other than some complaints about insufficient diskspace nothing noteworthy