{"id":55464,"date":"2020-01-21T00:00:00","date_gmt":"2020-01-20T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli"},"modified":"2020-02-18T14:03:35","modified_gmt":"2020-02-18T11:03:35","slug":"kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","title":{"rendered":"Kako je kriti\u010dna ranljivost Citrix NetScaler CVE-2019-19781 razotkrila skrivene probleme u IT industriji","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dragi \u010ditatelju, \u017eelim prvo naglasiti da kao stanovnik Njema\u010dke, prvenstveno opisujem situaciju u ovoj zemlji. Mogu\u0107e je da je situacija u va\u0161oj zemlji radikalno druga\u010dija.<\/p>\n<p>17. decembra 2019. godine na stranici Citrix Knowledge Center objavljene su informacije o kriti\u010dnoj ranjivosti u linijama proizvoda Citrix Application Delivery Controller (NetScaler ADC) i Citrix Gateway, poznatom u narodu kao NetScaler Gateway. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex>U narednom periodu ranjivost je prona\u0111ena i u liniji SD-WAN. Ranjivost je poga\u0111ala sve verzije proizvoda, po\u010dev\u0161i od 10.5 do aktuelne 13.0 te je omogu\u0107ila neautorizovanom napada\u010du izvr\u0161avanje malicioznog koda u sistemu, prakti\u010dno pretvaraju\u0107i NetScaler u platformu za daljnje napade na unutra\u0161nju mre\u017eu.<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX267027\">CTX267027: CVE-2019-19781 \u2014 Ranjivost u Citrix Application Delivery Controller<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX267679\">CTX267679: Koraci za ubla\u017eavanje za CVE-2019-19781<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX269180\">CTX269180: CVE-2019-19781 \u2013 Alat za verifikaciju (Objavljeno 15.01.2020!)<\/a><\/noindex><\/li>\n<\/ul>\n<p>\nIstovremeno s objavom informacija o ranjivosti, Citrix je objavio preporuke za smanjenje rizika (Workaround). Potpuno zatvaranje ranjivosti bilo je obe\u0107ano tek do kraja januara 2020. godine.<\/p>\n<p>Kriti\u010dnost ove ranjivosti (broj CVE-2019-19781) je <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-19781\">ocenjena na 9.8 bodova od 10<\/a><\/noindex>. Prema <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ptsecurity.com\/ru-ru\/about\/news\/obnaruzhena-uyazvimost-v-po-citrix-pozvolyayushchaya-proniknut-v-seti-80-000-kompaniy\/\">informacijama kompanije Positive Technologies<\/a><\/noindex> ranjivost poga\u0111a vi\u0161e od 80.000 kompanija \u0161irom sveta.<\/p>\n<h3>Mogu\u0107a reakcija na vest<\/h3>\n<p>\nKao odgovorna osoba, smatrao sam da su svi IT stru\u010dnjaci, koji imaju proizvode NetScaler u svojoj infrastrukturi, postupili na slede\u0107i na\u010din:<\/p>\n<ol>\n<li>neodlo\u017eno implementirali sve preporu\u010dene korake iz \u010dlanka CTX267679 za minimizaciju rizika.<\/li>\n<li>ponovo proverili postavke Firewall-a, u pogledu dozvoljenog saobra\u0107aja od NetScaler-a prema unutra\u0161njoj mre\u017ei.<\/li>\n<li>preporu\u010dili administratorima IT sigurnosti da obrate pa\u017enju na 'neobi\u010dne' poku\u0161aje pristupa NetScaler-u i u slu\u010daju potrebe da ih blokiraju. Podse\u0107am, NetScaler se obi\u010dno nalazi u DMZ.<\/li>\n<li>procijenili mogu\u0107nost privremenog isklju\u010divanja NetScaler-a iz mre\u017ee, do dobijanja detaljnijih informacija o problemu. Tokom predbo\u017ei\u0107nih praznika, odmora itd. to ne bi bilo tako bolno. Pored toga, mnoge firme imaju alternativnu mogu\u0107nost pristupa putem VPN-a.<\/li>\n<\/ol>\n<p><\/p>\n<h3>\u0160ta se dalje dogodilo?<\/h3>\n<p>\n\u017dal, kot se bo izkazalo kasneje, so bili zgoraj opisani koraki, ki predstavljajo standardni pristop, ve\u010dinoma ignorirani. <\/p>\n<p>Mnogi strokovnjaki, odgovorni za Citrix infrastrukturo, so o ranljivosti izvedeli \u0161ele 13. 1. 2020. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.tagesschau.de\/investigativ\/swr\/citrix-sicherheitsluecke-101.html\">iz osrednjih novic<\/a><\/noindex>. Tisti so izvedeli, ko je bilo ogromno \u0161tevilo sistemov, ki so bili pod njihovo odgovornostjo, kompromitiranih. Absurdnost situacije je dosegla to\u010dko, kjer so bili potrebni eksploitji povsem <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/projectzeroindia\/CVE-2019-19781\">zakonsko prenosljivi iz interneta.<\/a><\/noindex>.<br \/>\nNekako sem domneval, da IT strokovnjaki berejo obvestila proizvajalcev sistemov, ki so jim dodeljeni, znajo uporabljati Twitter, sledijo vodilnim strokovnjakom v svoji panogi in so dol\u017eni biti na teko\u010dem z aktualnimi dogodki.<\/p>\n<p>V resnici so \u0161tevilni kupci Citrixa ve\u010d kot tri tedne popolnoma ignorirali priporo\u010dila proizvajalca. Citrixovi kupci so prakti\u010dno vse velike in srednje dru\u017ebe v Nem\u010diji ter skoraj vse dr\u017eavne ustanove. Ranjivost je predvsem zadevala dr\u017eavne strukture.<\/p>\n<h3>Vsaj je nekaj dela.<\/h3>\n<p>\nTisti, katerih sistemi so bili kompromitirani, potrebujejo popolno ponovno namestitev, vklju\u010dno z zamenjavo TSL certifikatov. Morda se bodo tisti kupci Citrixa, ki so pri\u010dakovali od proizvajalca bolj aktivne ukrepe pri odpravi kriti\u010dne ranljivosti, resno lotili iskanja alternativ. Treba je priznati, da reakcija Citrixa ne navdihuje zaupanja.<\/p>\n<h3>Ve\u010d vpra\u0161anj kot odgovorov.<\/h3>\n<p>\nPojavlja se vpra\u0161anje, kaj so po\u010deli \u0161tevilni partnerji podjetja Citrix, zlati in platinasti? Zakaj je \u0161ele v tretjem tednu leta 2020 na straneh nekaterih partnerjev Citrixa pojavila potrebna informacija? O\u010ditno so tudi dragoceni zunanji svetovalci zamudili to nevarno situacijo. Ne \u017eelim nikogar prizadeti, toda naloga partnerja je v prvi vrsti prepre\u010devanje nastajajo\u010dih te\u017eav, ne pa ponujanje = prodaja pomo\u010di pri njihovi re\u0161itvi.<\/p>\n<p>V resnici je ta situacija razkrila dejansko stanje v svetu IT varnosti. Tako zaposlenim v IT oddelkih podjetij kot tudi svetovalcem partnerskih podjetij Citrixa bi morala biti jasna ena resnica: \u010de obstaja ranljivost, jo je treba odpraviti. Kriti\u010dne ranljivosti je treba odpraviti takoj!<br \/>\n<br \/>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/484548\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0432 \u0432\u0430\u0448\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043a\u0430\u0440\u0434\u0438\u043d\u0430\u043b\u044c\u043d\u043e \u0438\u043d\u0430\u044f. 17 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 Citrix Knowledge Center \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0430\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Citrix Application Delivery Controller (NetScaler ADC) \u0438 Citrix Gateway, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55464","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Citrix NetScaler CVE-2019-19781 \u043e\u0431\u043d\u0430\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b IT-\u043e\u0442\u0440\u0430\u0441\u043b\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-20T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kako je kriti\u010dna ranjivost Citrix NetScaler CVE-2019-19781 otkrila skrivene probleme IT industrije | ProHoster","description":"Dragi \u010ditatelju, prije svega \u017eelim istaknuti da, kao stanovnik Njema\u010dke, prvenstveno opisujem situaciju u ovoj zemlji.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Citrix NetScaler CVE-2019-19781 \u043e\u0431\u043d\u0430\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b IT-\u043e\u0442\u0440\u0430\u0441\u043b\u0438 | ProHoster","og:description":"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-20T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55464","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:43:31","updated":"2022-09-28 09:07:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/55464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=55464"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/55464\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=55464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=55464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=55464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}