PT-2008-3985 · Citrix · Citrix Access Gateway Standard Edition+1

Published 2008-06-03 · Updated 2017-08-08 · CVE-2008-2528

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix Access Gateway Standard Edition versions 4.5.7 and earlier Citrix Access Gateway Advanced Edition versions 4.5 HF2 and earlier

Description The issue allows attackers to bypass authentication, gaining access to network resources through unspecified vectors.

Recommendations For Citrix Access Gateway Standard Edition versions 4.5.7 and earlier, update to a version later than 4.5.7. For Citrix Access Gateway Advanced Edition versions 4.5 HF2 and earlier, update to a version later than 4.5 HF2.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-2528

Affected Products

Citrix Access Gateway Advanced Edition

Citrix Access Gateway Standard Edition

References · 8

• http://secunia.com/advisories/30175 · Patch
• http://support.citrix.com/article/CTX116930 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-2528 · Security Note
• http://securitytracker.com/id?1020025 · Note
• http://vupen.com/english/advisories/2008/1474/references · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2528 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42356 · Note
• http://securityfocus.com/bid/29174 · Note