PT-2006-7174 · Citrix · Citrix Access Gateway+1

Published 2006-12-15 · Updated 2017-07-29 · CVE-2006-6572

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix Access Gateway versions 4.2 with Advanced Access Control 4.2 Citrix Advanced Access Control (AAC) Option version 4.0

Description The issue allows remote authenticated users to bypass access policies via a certain login method when the Browser-Only access feature is enabled.

Recommendations For Citrix Access Gateway version 4.2 with Advanced Access Control 4.2, update to a version released after 20061114. For Citrix Advanced Access Control (AAC) Option version 4.0, update to a version released after 20061114.

Fix

Related Identifiers

CVE-2006-6572

Affected Products

Citrix Access Gateway

Citrix Advanced Access Control (Aac) Option

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-6572 · Security Note
• http://support.citrix.com/article/CTX111614 · Vendor Advisory
• http://securitytracker.com/id?1017227 · Vendor Advisory
• http://support.citrix.com/article/CTX111615 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6572 · Note
• http://vupen.com/english/advisories/2006/4525 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30303 · Note
• http://securityfocus.com/bid/21080 · Note
• http://secunia.com/advisories/22909 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30302 · Note