CVE Vulnerabilities

CVE-2008-2528

Improper Authentication

Published: Jun 03, 2008 | Modified: Aug 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain access to network resources via unspecified vectors.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Access_gateway Citrix * 4.5
Access_gateway Citrix 4.5.5 4.5.5
Access_gateway Citrix * 4.5.7
Access_gateway Citrix 4.5.6 4.5.6

Potential Mitigations

References