CVE-2008-2299 Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix presentation server | <= 4.5 | No fix listed |
| citrix access essentials | <= 2.0 | No fix listed |
| citrix desktop server | = 1.0 | No fix listed |
References
- 30271 third-party-advisory vendor-advisory
- support.citrix.com patch
- 29233 vdb-entry
- 1020026 patch vdb-entry
- ADV-2008-1531 vdb-entry
- citrix-presentationserver-ica-weak-security(42444) vdb-entry