Remote Access Bypass in Citrix NetScaler Access Gateway Versions
CVE-2013-2767

Currently unrated

Key Information:

Vendor
Citrix
Status
Netscaler Access Gateway Firmware
Netscaler Access Gateway
Vendor
CVE Published:
25 April 2013

Summary

A vulnerability in Citrix NetScaler Access Gateway Enterprise Edition allows remote attackers to circumvent intended intranet access restrictions. This flaw exists in versions prior to 9.3.62.4 and in version 10.x up to 10.0.74.4, as well as in the Common Criteria build prior to 9.3.53.6. Attackers could exploit this weakness through unknown methods, presenting significant security implications for users relying on this access management solution.

References

http://support.citrix.com/article/ctx137238
x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/521612
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.