CVE-2009-2213

MEDIUM6.5

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9

Published Jun 25, 2009

Modified 1 years ago

Details

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.

References

WEB

http://support.citrix.com/article/CTX118770

WEB

http://www.securityfocus.com/bid/35422

WEB

http://www.vupen.com/english/advisories/2009/1641

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/51274

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2009-2213

CVSS Analysis