CVEvulnerability
CVE-2008-2299
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-05-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.
Affected configurations
• citrix presentation server (<= 4.5)
• citrix access essentials (<= 2.0)
• citrix desktop server 1.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/30271 Vendor Advisory
- http://support.citrix.com/article/CTX114893 Patch
- http://www.securityfocus.com/bid/29233 www.securityfocus.com
- http://www.securitytracker.com/id?1020026 Patch
- http://www.vupen.com/english/advisories/2008/1531/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42444 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30271 Vendor Advisory
- http://support.citrix.com/article/CTX114893 Patch
- http://www.securityfocus.com/bid/29233 www.securityfocus.com
- http://www.securitytracker.com/id?1020026 Patch
- http://www.vupen.com/english/advisories/2008/1531/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42444 exchange.xforce.ibmcloud.com