PT-2008-3985 · Citrix · Citrix Access Gateway Standard Edition+1

Publicado 2008-06-03 · Atualizado 2017-08-08 · CVE-2008-2528

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix Access Gateway Standard Edition versions 4.5.7 and earlier Citrix Access Gateway Advanced Edition versions 4.5 HF2 and earlier

Description The issue allows attackers to bypass authentication, gaining access to network resources through unspecified vectors.

Recommendations For Citrix Access Gateway Standard Edition versions 4.5.7 and earlier, update to a version later than 4.5.7. For Citrix Access Gateway Advanced Edition versions 4.5 HF2 and earlier, update to a version later than 4.5 HF2.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-2528

Produtos afetados

Citrix Access Gateway Advanced Edition

Citrix Access Gateway Standard Edition

Referências · 8

• http://securitytracker.com/id?1020025 · Nota
• http://vupen.com/english/advisories/2008/1474/references · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2528 · Nota
• http://secunia.com/advisories/30175 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42356 · Nota
• http://support.citrix.com/article/CTX116930 · Correção
• http://securityfocus.com/bid/29174 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2528 · Nota de Segurança