CVE-2007-0011
Last modified
CVE-2007-0011 is a vulnerability of currently unknown severity. The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache.. EPSS estimates a 2.12% chance of exploitation in the next 30 days.
Description
The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Access Gateway | 4.0 |
| Citrix | Access Gateway | 4.2 |
| Citrix | Access Gateway | 4.5 |
References
- http://secunia.com/advisories/26143Patch, Vendor Advisory
- http://secunia.com/advisories/26143Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0011?
How severe is CVE-2007-0011?
How do I fix CVE-2007-0011?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0005Multiple buffer overflows in the (1) read and (2) write hand…
- CVE-2007-0006The key serial number collision avoidance code in the key_al…
- CVE-2007-0007gnucash 2.0.4 and earlier allows local users to overwrite ar…
- CVE-2007-0008Integer underflow in the SSLv2 support in Mozilla Network Se…
- CVE-2007-0009Stack-based buffer overflow in the SSLv2 support in Mozilla …
- CVE-2007-0010The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2…
- CVE-2007-0012Sun JRE 5.0 before update 14 allows remote attackers to caus…
- CVE-2007-0014ChainKey Java Code Protection allows attackers to decompile …
- CVE-2007-0015Buffer overflow in Apple QuickTime 7.1.3 allows remote attac…
- CVE-2007-0016Stack-based buffer overflow in MoviePlay 4.76 allows remote …
- CVE-2007-0017Multiple format string vulnerabilities in (1) the cdio_log_h…
- CVE-2007-0018Stack-based buffer overflow in the NCTAudioFile2.AudioFile A…
Are you affected by CVE-2007-0011?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST