Lucene search

K
cveMitreCVE-2007-4017
HistoryJul 26, 2007 - 1:30 a.m.

CVE-2007-4017

2007-07-2601:30:00
mitre
web.nvd.nist.gov
32
cve-2007-4017
cross-site request forgery
csrf
citrix access gateway
security
vulnerability
administration console
nvd.

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

Low

EPSS

0.025

Percentile

90.2%

Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators.

Affected configurations

Nvd
Node
citrixaccess_gatewayMatch4.5advanced
OR
citrixaccess_gatewayMatch4.5standard
VendorProductVersionCPE
citrixaccess_gateway4.5cpe:2.3:a:citrix:access_gateway:4.5:*:advanced:*:*:*:*:*
citrixaccess_gateway4.5cpe:2.3:a:citrix:access_gateway:4.5:*:standard:*:*:*:*:*

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

Low

EPSS

0.025

Percentile

90.2%

Related for CVE-2007-4017