VULNERABILITY INTELLIGENCE

CVE-2009-2213

CVSS score6.5 MEDIUM

EPSS probability2.02%

CISA KEVNot currently listed

Published2009-06-25

Last modified2026-06-16

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.

Weakness classification

CWE-863: Incorrect Authorization

Primary references

cve@mitre.org — Broken Link, Vendor Advisory
cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org — Permissions Required
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry