A vulnerability has been reported in Citrix Access Gateway appliances, which can be exploited by malicious people to gain knowledge of sensitive information.

The vulnerability is caused due to an unspecified error when using Advanced Access Control with Access Gateway, which can be exploited by an unauthenticated person to gain access to data on the appliance.

The vulnerability is reported in the following products:
* Access Gateway 4.5 Advanced Edition
* Access Gateway 4.2 with Advanced Access Control 4.2

When deployed with:
* Access Gateway appliance 4.2
* Access Gateway appliance 4.2.1
* Access Gateway appliance 4.2.2

Access Gateway appliances deployed without Advanced Access Control are not vulnerable to this issue.

Solution
Apply hotfix (see vendor advisory for details).

Provided and/or discovered by
The vendor credits Thierry Zoller and Laurent Kempenaar of Telindus PSF.

Original Advisory
http://support.citrix.com/article/CTX111695

Deep Links
Links available in Customer Area