Vulnerabilities > CVE-2007-4017 - Remote vulnerability in Citrix Access Gateway 4.5
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators. Citrix Access Gateway is offered both as software or hardware.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
References
- http://osvdb.org/37841
- http://secunia.com/advisories/26143
- http://support.citrix.com/article/CTX113817
- http://support.citrix.com/article/CTX114028
- http://www.securityfocus.com/bid/24975
- http://www.securitytracker.com/id?1018435
- http://www.vupen.com/english/advisories/2007/2583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35513