Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-2453
citrix
xenapp
hotfix rollup pack
access policy
bypass
cve-2009-2453
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.4%
Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.
Affected configurations
Node
citrixpresentation_serverMatch4.5-se
ORcitrixpresentation_serverMatch4.5-windows_server_2003
ORcitrixpresentation_serverMatch4.5-windows_server_2003_x64
ORcitrixpresentation_serverMatch4.5fp1
ORcitrixxenappMatch4.5fp3
| CPE | Name | Operator | Version |
|---|---|---|---|
| citrix:presentation_server | citrix presentation server | eq | 4.5 |
| citrix:xenapp | citrix xenapp | eq | 4.5 |
Related
nvd
nvd
CVE-2009-2453
2009-07-14 14:30:00
prion
prion
Design/Logic Flaw
2009-07-14 14:30:00
cvelist
cvelist
CVE-2009-2453
2022-10-03 16:24:06
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.4%
Related for CVE-2009-2453