medium6.5
CVE-2009-2213
The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earli…
Impact
The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Netscaler Access Gateway Firmware | through 8.1 Versions 7.0, 8.0, 9.0 |
| Citrix | Netscaler Access Gateway | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://support.citrix.com/article/CTX118770
- http://www.securityfocus.com/bid/35422
- http://www.vupen.com/english/advisories/2009/1641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51274
- http://support.citrix.com/article/CTX118770
- http://www.securityfocus.com/bid/35422
- http://www.vupen.com/english/advisories/2009/1641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51274