CVE-2007-4017

Currently unrated

Key Information:

Vendor: Citrix
Status: Access Gateway
Vendor: CVE Published:; 26 July 2007

Summary

Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators.

References

http://www.vupen.com/english/advisories/2007/2583

vdb-entryx_refsource_VUPEN

http://support.citrix.com/article/CTX113817

x_refsource_CONFIRM

http://secunia.com/advisories/26143

third-party-advisoryx_refsource_SECUNIA

EPSS Score

1% chance of being exploited in the next 30 days.

Timeline

Vulnerability published
Jul 26, 2007
Vulnerability Reserved
Jul 25, 2007

Collectors

NVD DatabaseMitre Database