PT-2009-4870 · Citrix · Citrix Xenapp

Published 2009-07-14 · Updated 2009-07-14 · CVE-2009-2453

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Citrix XenApp versions 4.5 Hotfix Rollup Pack 3

Description The issue allows attackers to bypass intended access restrictions. This is due to the software not applying an access policy when it is defined with the Access Gateway Advanced Edition filters.

Recommendations For version 4.5 Hotfix Rollup Pack 3, consider applying an alternative access control mechanism to enforce intended restrictions until a proper fix is available. As a temporary workaround, review and manually enforce access policies to minimize the risk of unauthorized access.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-2453

Affected Products

Citrix Xenapp

References · 7

• http://secunia.com/advisories/34865 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2453 · Security Note
• http://securityfocus.com/bid/34691 · Patch
• http://support.citrix.com/article/CTX118792 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1154 · Vendor Advisory
• http://securitytracker.com/id?1022114 · Patch
• http://osvdb.org/53900 · Note