CVE-2008-6830 The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same....
MediumCVSS 4.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix web interface | = 5.0 | No fix listed |
| citrix web interface | = 5.0.1 | No fix listed |
References
- 49387 patch vdb-entry
- 32444 third-party-advisory vendor-advisory
- support.citrix.com patch vendor-advisory
- 31943 vdb-entry
- 1021110 vdb-entry
- ADV-2008-2946 patch vdb-entry vendor-advisory
- citrix-webinterface-security-bypass(46135) vdb-entry