First published: Fri Dec 15 2006(Updated: )
Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114, when the Browser-Only access feature is enabled, allows remote authenticated users to bypass access policies via a certain login method, a different issue than CVE-2006-4846. NOTE: some of these details are obtained from third party information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Citrix Access Gateway | =4.2 | |
Citrix Access Gateway | =4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2006-6572 is classified as medium, with a score of 6.5.
To fix CVE-2006-6572, ensure that you update Citrix Advanced Access Control and Access Gateway to the latest versions available after 20061114.
CVE-2006-6572 affects Citrix Advanced Access Control Option 4.0 and Access Gateway 4.2.
CVE-2006-6572 can be exploited by remote authenticated users to bypass access policies through a certain login method.
The Browser-Only access feature must be enabled for CVE-2006-6572 to be applicable.