PT-2009-2299 · Citrix · Citrix Web Interface

Published 2009-06-08 · Updated 2017-08-17 · CVE-2008-6830

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Citrix Web Interface versions 5.0 through 5.0.1

Description: The disconnection feature in the software does not properly terminate a user's web interface session. This allows attackers with access to the same browser instance to gain access to the user's Web Interface session, provided they also have valid credentials to the Web Interface.

Recommendations: For versions 5.0 through 5.0.1, consider implementing additional session termination measures or restricting access to the Web Interface to minimize the risk of unauthorized session access.

Fix

Related Identifiers

CVE-2008-6830

Affected Products

Citrix Web Interface

References · 8

• http://secunia.com/advisories/32444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6830 · Security Note
• http://vupen.com/english/advisories/2008/2946 · Vendor Advisory
• http://support.citrix.com/article/CTX118768 · Vendor Advisory
• http://osvdb.org/49387 · Patch
• http://securitytracker.com/id?1021110 · Note
• http://securityfocus.com/bid/31943 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46135 · Note