7.5

CVE-2009-2453

EPSS 0.73%
Veröffentlicht 14.07.2009 14:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Citrix ≫ Presentation Server Version4.5 Update- Editionse

Citrix ≫ Presentation Server Version4.5 Update- Editionwindows_server_2003

Citrix ≫ Presentation Server Version4.5 Update- Editionwindows_server_2003_x64

Citrix ≫ Presentation Server Version4.5 Updatefp1

Citrix ≫ Xenapp Version4.5 Updatefp3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.73%	0.703

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://osvdb.org/53900

http://secunia.com/advisories/34865

Vendor Advisory

http://support.citrix.com/article/CTX118792

Patch

Vendor Advisory

http://www.securityfocus.com/bid/34691

Patch

http://www.securitytracker.com/id?1022114

Patch

http://www.vupen.com/english/advisories/2009/1154

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-2453

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-2453

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-2453

EUVD