CVE-2017-17549

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensitive information from the backend client TLS handshake by leveraging use of TLS with Client Certificates and a Diffie-Hellman Ephemeral (DHE) key exchange.

• CWE-200

• http://www.securityfocus.com/bid/102177Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040011Third Party Advisory, VDB Entry
• https://support.citrix.com/article/ctx230612Vendor Advisory
• http://www.securityfocus.com/bid/102177Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040011Third Party Advisory, VDB Entry
• https://support.citrix.com/article/ctx230612Vendor Advisory

Published

Dec 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17543Users' VPN authentication credentials are unsafely encrypted…
• CVE-2017-17544A privilege escalation vulnerability in Fortinet FortiOS 6.0…7.2
• CVE-2017-17545Rejected reason: Not used
• CVE-2017-17546Rejected reason: Not used
• CVE-2017-17547Rejected reason: Not used
• CVE-2017-17548Rejected reason: Not used
• CVE-2017-1755IBM Security Identity Governance Virtual Appliance 5.2 throu…6.5
• CVE-2017-17550ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affec…
• CVE-2017-17551The Backup and Restore feature in Mobotap Dolphin Browser fo…
• CVE-2017-17552/LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 -…8.8
• CVE-2017-17553The Dolphin Browser for Android 12.0.2 suffers from an insec…
• CVE-2017-17554A NULL pointer dereference (DoS) Vulnerability was found in …