CVE Details
ID CVE-2013-2767
Summary Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows remote attackers to bypass intended intranet access restrictions via unknown vectors.
References
Vulnerable Configurations
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.0:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.0.74.4:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:10.0.74.4:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.2:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.2:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.1:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.1:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:8.1:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:8.1:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:agee_common_criteria_build:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3:agee_common_criteria_build:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3.53.6:agee_common_criteria_build:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3.53.6:agee_common_criteria_build:*:*:*:*:*:*
  • cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3.61.5:*:*:*:*:*:*:*
    cpe:2.3:o:citrix:netscaler_access_gateway_firmware:9.3.61.5:*:*:*:*:*:*:*
  • cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*
    cpe:2.3:h:citrix:netscaler_access_gateway:-:-:enterprise:*:*:*:*:*
CVSS
Base: 5.4 (as of 02-05-2013 - 04:00)
Impact: 6.9
Exploitability:4.9
CWE NVD-CWE-noinfo
CAPEC Click the CAPEC title to display a description
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE NONE NONE
cvss-vector via4 AV:N/AC:H/Au:N/C:C/I:N/A:N
refmap via4
cert-vn VU#521612
confirm http://support.citrix.com/article/ctx137238
Last major update 02-05-2013 - 04:00
Published 25-04-2013 - 20:55
Last modified 02-05-2013 - 04:00