citrix access gateway 4.5 vulnerabilities and exploits

(subscribe to this query)

Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control (AAC) 4.2, when deployed on the Access Gateway appliance 4.2 up to and including 4.2.2 allows remote authenticated users to "gain access to data" and obtain sen...

Citrix Access Gateway 4.2 Citrix Access Gateway 4.5 Citrix Access Gateway 4.2.1 Citrix Access Gateway 4.2.2

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent malicious users to hijack sessions by reading "residual information", including the a re...

Citrix Access Gateway 4.2 Citrix Access Gateway 4.5 Citrix Access Gateway 4.0

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and previous versions, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows malicious users to ...

Citrix Access Gateway 9.1-104.5 Citrix Access Gateway 8.1-69.4 Citrix Access Gateway 9.0.71.3 Citrix Access Gateway 8.0 Citrix Access Gateway Citrix Access Gateway .8.0 Citrix Access Gateway 4.5.5 Citrix Access Gateway 4.5.6 Citrix Access Gateway 4.6.2 Citrix Access Gateway 4.6.3 Citrix Access Gateway 4.5.7 Citrix Access Gateway 4.5 Citrix Access Gateway 4.6.1

2 EDB exploits

Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote malicious users to perform certain configuration changes as administrators.

Citrix Access Gateway 4.5

Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition prior to 4.5.5 and Advanced Edition prior to 4.5 HF1 allows malicious users to execute arbitrary code via unspecified vectors.

Citrix Access Gateway Citrix Access Gateway 4.2 Citrix Access Gateway 4.0

Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and previous versions and Advanced Edition 4.5 HF2 and previous versions allows malicious users to bypass authentication and gain "access to network resources" via unspecified vectors.

Citrix Access Gateway Citrix Access Gateway 4.5.5 Citrix Access Gateway 4.5.6

The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) prior to 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition prior to 4.5.5 and Advanced Edition prior to 4.5 HF1 allows remote malicious users to download and execu...

Citrix Access Gateway

Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and previous versions, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (aka CCAOControl Object) prior to 4.5.0.0 in Citrix...

Citrix Endpoint Analysis Client Mozilla Firefox Citrix Access Gateway

Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows malicious users to bypass intended access restrictions via unknown vectors.

Citrix Presentation Server 4.5 Citrix Xenapp 4.5

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...

Openssl Openssl 1.0.1j

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook