Vulnerabilities > CVE-2009-2213 - Incorrect Authorization vulnerability in Citrix products
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 4 | |
| Hardware | 1 |
Common Weakness Enumeration (CWE)
References
- http://support.citrix.com/article/CTX118770
- http://support.citrix.com/article/CTX118770
- http://www.securityfocus.com/bid/35422
- http://www.securityfocus.com/bid/35422
- http://www.vupen.com/english/advisories/2009/1641
- http://www.vupen.com/english/advisories/2009/1641
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51274
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51274