CVE-2024-12284, Console vulnerability A vulnerabi...
# citrix-netscaler
a
CVE-2024-12284, Console vulnerability A vulnerability has been discovered in NetScaler Console (formerly NetScaler ADM) and NetScaler Agent. https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US
😟 2
😕 1
🙈 1
r
Did anyone else expect to get an email from Citrix on this vulnerability but did not receive one?
c
Netscaler Agent is the built in agent on the Netscaler you install via cd mastools/scripts/mastools_init.sh correct? or are they talking about the Netscaler console agent you deploy from the Netscaler console cloud service to your hypervisor ?
d
John, they are talking about the standalone NetScaler Console agent. Robert, emails from Citrix are hit and miss... I -never- get them despite logging three separate tickets over time. But some of my colleagues and customers get them intermittently.
😯 1
c
I was under the impression the Netscaler console agent auto updates when using the cloud Netscaler console service
d
Yep that's correct, so this alert only applies to on-prem NetScaler Console (and associated NetScaler Agent deployed by NetScaler Console) I went to look at if there was an auto-update option for NetScaler Console on-prem agents, the doco isn't clear and I don't have immediate access to an on-prem NetScaler Console instance to check.
c
yip thats correct @c4rm0 Checked a few ADM Agents we look after and they were running the latest protected build.