Citrix is vulnerable, applying patch isn't enough. 9.8 Rating

[L&LD]

The latest high-severity Citrix vulnerability under attack isn’t easy to fix

If you run a Netscaler ADC or Gateway, assume it's compromised and take action... fast.

arstechnica.com

 

[Justinh]

The patch isn't really a patch if it doesn't correct current compromised sessions, in my opinion.

 

[sfx2000]

It's a lot like shellshock - you can fix the shell, but unless one clears out the current sessions...

If you're in the cloud with cloud-based Apps, all those sessions have to be closed out...