PT-2006-7174 · Citrix · Citrix Access Gateway+1

Publicado 2006-12-15 · Atualizado 2017-07-29 · CVE-2006-6572

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix Access Gateway versions 4.2 with Advanced Access Control 4.2 Citrix Advanced Access Control (AAC) Option version 4.0

Description The issue allows remote authenticated users to bypass access policies via a certain login method when the Browser-Only access feature is enabled.

Recommendations For Citrix Access Gateway version 4.2 with Advanced Access Control 4.2, update to a version released after 20061114. For Citrix Advanced Access Control (AAC) Option version 4.0, update to a version released after 20061114.

Correção

Identificadores relacionados

CVE-2006-6572

Produtos afetados

Citrix Access Gateway

Citrix Advanced Access Control (Aac) Option

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-6572 · Nota de Segurança
• http://support.citrix.com/article/CTX111615 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6572 · Nota
• http://support.citrix.com/article/CTX111614 · Aviso do Fabricante
• http://securitytracker.com/id?1017227 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4525 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30303 · Nota
• http://securityfocus.com/bid/21080 · Nota
• http://secunia.com/advisories/22909 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30302 · Nota