CVE-2009-2213: Medium severity citrix netscaler access gateway vulnerability
The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2213?
CVE-2009-2213 is considered a high severity vulnerability due to potential unauthorized access by authenticated users.
How do I fix CVE-2009-2213?
To fix CVE-2009-2213, you should change the Default Authorization Action setting from Allow to Deny in the Security global settings.
What versions are affected by CVE-2009-2213?
CVE-2009-2213 affects Citrix NetScaler Access Gateway appliances with firmware versions 9.0, 8.1, 8.0, and 7.0.
What impact does CVE-2009-2213 have on Citrix NetScaler?
CVE-2009-2213 could allow remote authenticated users to bypass intended access restrictions, potentially leading to unauthorized access.
Is CVE-2009-2213 specific to any edition of Citrix NetScaler?
Yes, CVE-2009-2213 specifically impacts the Enterprise Edition of the Citrix NetScaler Access Gateway.