PT-2009-2299 · Citrix · Citrix Web Interface

Publicado 2009-06-08 · Atualizado 2017-08-17 · CVE-2008-6830

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Citrix Web Interface versions 5.0 through 5.0.1

Description: The disconnection feature in the software does not properly terminate a user's web interface session. This allows attackers with access to the same browser instance to gain access to the user's Web Interface session, provided they also have valid credentials to the Web Interface.

Recommendations: For versions 5.0 through 5.0.1, consider implementing additional session termination measures or restricting access to the Web Interface to minimize the risk of unauthorized session access.

Correção

Identificadores relacionados

CVE-2008-6830

Produtos afetados

Citrix Web Interface

Referências · 8

• http://secunia.com/advisories/32444 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6830 · Nota de Segurança
• http://securitytracker.com/id?1021110 · Nota
• http://securityfocus.com/bid/31943 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46135 · Nota
• http://vupen.com/english/advisories/2008/2946 · Aviso do Fabricante
• http://support.citrix.com/article/CTX118768 · Aviso do Fabricante
• http://osvdb.org/49387 · Correção