CVE-2006-4846

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-19 · updated 2026-06-16

Description

Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors.

Affected products

Citrix Access Gateway: 4.2 (and their updates)

References

http://secunia.com/advisories/21941
http://securitytracker.com/id?1016874
http://support.citrix.com/article/CTX110439
http://support.citrix.com/article/CTX110950
http://www.kb.cert.org/vuls/id/658620
http://www.osvdb.org/28938
http://www.securityfocus.com/bid/20066
http://www.vupen.com/english/advisories/2006/3643
https://exchange.xforce.ibmcloud.com/vulnerabilities/28990
http://secunia.com/advisories/21941
http://securitytracker.com/id?1016874
http://support.citrix.com/article/CTX110439

Get alerted when CVE-2006-4846 or the next vulnerability affects your stack