exploitDog

CVE-2007-0011

Опубликовано: 05 нояб. 2007

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:citrix:access_gateway:4.0:*:*:*:*:*:*:*

cpe:2.3:a:citrix:access_gateway:4.2:*:*:*:*:*:*:*

cpe:2.3:a:citrix:access_gateway:4.5:*:advanced:*:*:*:*:*

cpe:2.3:a:citrix:access_gateway:4.5:*:standard:*:*:*:*:*

EPSS

Процентиль: 79%

0.01247

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-ph74-68r2-9xmr

github

почти 4 года назад

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache.

EPSS

Процентиль: 79%

0.01247

Низкий

5 Medium

CVSS2

Дефекты

CWE-200