|
Citrix Access Gateway Advanced Access Control Authentication Bypass |
|
Monday, 18 September 2006
by Michel Roth
|
|
A vulnerability has been reported in Citrix Access Gateway, which can be exploited by malicious people to bypass certain security restrictions.
The vulnerability is caused due to an error in the LDAP authentication. This can be exploited to bypass the authentication process and login without providing any user credentials.
Successful exploitation requires that the Advanced Access Control option is set to use LDAP authentication.
The vulnerability has been reported in Citrix Access Gateway deployed with Advanced Access Control 4.2. Other versions may also be affected.
Read the full advisory here.
|
