Vulnerability Intelligence Report
CVE-2009-2213
The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.
No Active Exploit Signals
CVSS Base Score
6.5
MEDIUM
EPSS Probability:2.02%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| citrix | netscaler_access_gateway_firmware | 7.0, 8.0, 9.0 |
| citrix | netscaler_access_gateway | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.016%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2009-06-25T00:00:00 |
| Published | 2009-06-25T21:00:00 |
| Patch Date | 2009-05-05 |
| Last Updated | 2024-10-21T16:31:37 |
Community Chatter & Buzz