NVD

Id
49698  
Name
CVE-2009-2453  
Description
Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-07-14  
Modified Date
2009-07-14  
Seq
2009-2453  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251198 49698 CVE-2009-2453 http://support.citrix.com/article/CTX118792  View
251199 49698 CVE-2009-2453 34691  View
251200 49698 CVE-2009-2453 1022114  View
251201 49698 CVE-2009-2453 ADV-2009-1154  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42614 JVNDB-2009-003621 Citrix XenApp におけるアクセス制限を回避される脆弱性 Citrix XenApp (旧称: Presentation Server) は、Access Gateway Advanced Edition フィルタでアクセスポリシーが定義されている際、ポリシーを適用しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2009-2453 39884 CVE-2009-2453 49698 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003621.html 2009-04-22 2012-06-26 View