PT-2009-4870 · Citrix · Citrix Xenapp

Publicado 2009-07-14 · Atualizado 2009-07-14 · CVE-2009-2453

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix XenApp versions 4.5 Hotfix Rollup Pack 3

Description The issue allows attackers to bypass intended access restrictions. This is due to the software not applying an access policy when it is defined with the Access Gateway Advanced Edition filters.

Recommendations For version 4.5 Hotfix Rollup Pack 3, consider applying an alternative access control mechanism to enforce intended restrictions until a proper fix is available. As a temporary workaround, review and manually enforce access policies to minimize the risk of unauthorized access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-2453

Produtos afetados

Citrix Xenapp

Referências · 7

• http://secunia.com/advisories/34865 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2453 · Nota de Segurança
• http://osvdb.org/53900 · Nota
• http://securityfocus.com/bid/34691 · Correção
• http://support.citrix.com/article/CTX118792 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1154 · Aviso do Fabricante
• http://securitytracker.com/id?1022114 · Correção