Lucene search

[email protected]CVE-2009-2213

HistoryJun 25, 2009 - 11:14 p.m.

CVE-2009-2213

2009-06-2523:14:15

CWE-863

[email protected]

web.nvd.nist.gov

cve-2009-2213

citrix

netscaler

access gateway

firmware

security loophole

remote authentication

6.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

JSON

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.

Affected configurations

NVD

Node

citrixnetscaler_access_gateway_firmwareRange≤8.1

citrixnetscaler_access_gateway_firmwareMatch7.0

citrixnetscaler_access_gateway_firmwareMatch8.0

citrixnetscaler_access_gateway_firmwareMatch9.0

AND

citrixnetscaler_access_gatewayMatch--enterprise

CPENameOperatorVersion
citrix:netscaler_access_gateway_firmwarecitrix netscaler access gateway firmwarele8.1
citrix:netscaler_access_gateway_firmwarecitrix netscaler access gateway firmwareeq7.0
citrix:netscaler_access_gateway_firmwarecitrix netscaler access gateway firmwareeq8.0
citrix:netscaler_access_gateway_firmwarecitrix netscaler access gateway firmwareeq9.0
citrix:netscaler_access_gatewaycitrix netscaler access gatewayeq-

CPE	Name	Operator	Version
citrix:netscaler_access_gateway_firmware	citrix netscaler access gateway firmware	le	8.1
citrix:netscaler_access_gateway_firmware	citrix netscaler access gateway firmware	eq	7.0
citrix:netscaler_access_gateway_firmware	citrix netscaler access gateway firmware	eq	8.0
citrix:netscaler_access_gateway_firmware	citrix netscaler access gateway firmware	eq	9.0
citrix:netscaler_access_gateway	citrix netscaler access gateway	eq	-

References

support.citrix.com/article/CTX118770

www.securityfocus.com/bid/35422

www.vupen.com/english/advisories/2009/1641

exchange.xforce.ibmcloud.com/vulnerabilities/51274

6.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

JSON

Related for CVE-2009-2213

prion1 nvd1 cvelist1