CVE-2010-4566
Last modified
CVE-2010-4566 is a vulnerability of currently unknown severity. The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.. EPSS estimates a 27.79% chance of exploitation in the next 30 days.
Description
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Citrix | Access Gateway | <= 9.2-49.8 | — |
| Citrix | Access Gateway | .8.0 | M50.3 |
| Citrix | Access Gateway | 8.0 | M48.7 |
| Citrix | Access Gateway | 8.1-69.4 | — |
| Citrix | Access Gateway | 9.0.71.3 | — |
| Citrix | Access Gateway | 9.1-104.5 | — |
| Citrix | Access Gateway | 4.5 | — |
| Citrix | Access Gateway | 4.5.5 | — |
| Citrix | Access Gateway | 4.5.6 | — |
| Citrix | Access Gateway | 4.5.7 | — |
| Citrix | Access Gateway | 4.6.1 | — |
| Citrix | Access Gateway | 4.6.2 | — |
| Citrix | Access Gateway | 4.6.3 | — |
References
- http://support.citrix.com/article/CTX127613Vendor Advisory
- http://support.citrix.com/article/CTX127613Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-4566?
How severe is CVE-2010-4566?
How do I fix CVE-2010-4566?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-4558phpMyFAQ 2.6.11 and 2.6.12, as distributed between December …
- CVE-2010-4559Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-4560Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-4562Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when u…
- CVE-2010-4563The Linux kernel, when using IPv6, allows remote attackers t…
- CVE-2010-4565The bcm_connect function in net/can/bcm.c (aka the Broadcast…
- CVE-2010-4567Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.…
- CVE-2010-4568Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before…
- CVE-2010-4569Cross-site scripting (XSS) vulnerability in Bugzilla 3.7.1, …
- CVE-2010-4570Cross-site scripting (XSS) vulnerability in the duplicate-de…
- CVE-2010-4572CRLF injection vulnerability in chart.cgi in Bugzilla before…
- CVE-2010-4573The Update Installer in VMware ESXi 4.1, when a modified sfc…
Are you affected by CVE-2010-4566?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST