|
CVE Reference: CVE-2008-6830
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2008-6830
|
|
Description:
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.
|
|
CVE Status:
Candidate
|
|
References:
XF
http://xforce.iss.net/xforce/xfdb/46135
ST
1021110
SAID
Secunia Advisory: SA32444
OSVDB
49387
CONFIRM
http://support.citrix.com/article/CTX118768
BID
31943
|
|
|
Return to the previous page.
|
