CVE-2020-8200: Citrix StoreFront Server

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server.

Affected products

• Citrix StoreFront Server: before 2006 (fixed in 2006); from 3.0, before 3.0.8001 (fixed in 3.0.8001); from 3.12, before 3.12.5001 (fixed in 3.12.5001); from 1912, before 1912.0.1000 (fixed in 1912.0.1000)

Published 2020-09-18. Last modified 2026-06-17.