CVE Feed

    Dashboard / CVE / CVE-2009-2213

    CVE-2009-2213

    The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.

    Published:Jun 25, 2009
    Last Modified:Apr 23, 2026
    EPS:Jun 25, 2009
    EPSS Score:0.00347
    CVSS Score:6.5

    Affected Products

    Vendor
    Citrix
    Product
    Netscaler Access Gateway
    Vendor
    Citrix
    Product
    Netscaler Access Gateway Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2014-4346 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in administration user interface in Citrix NetScaler Application Deli…
    CVE-2014-4347 (CVSS 5) — Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway (formerly Access Gateway Enterpri…
    CVE-2014-1899 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Access Gateway Enterpris…
    CVE-2014-2882 (CVSS 10) — Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and …
    CVE-2014-2881 (CVSS 10) — Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet…
    CVE-2013-2767 (CVSS 5.4) — Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High