CVE-2007-0011

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which…

published November 5, 2007

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02118 · 81.7th percentile
Published
2007-11-05T17:00Z
EPSS history
Timeline
  • 05 NOV 17:00Z
    The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which…
    cvelistv5