CVE-2006-6572

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-15 · updated 2026-06-16

Description

Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114, when the Browser-Only access feature is enabled, allows remote authenticated users to bypass access policies via a certain login method, a different issue than CVE-2006-4846. NOTE: some of these details are obtained from third party information.

Affected products

Citrix Access Gateway: 4.0, 4.2 (and their updates)

References

http://secunia.com/advisories/22909
http://securitytracker.com/id?1017227
http://support.citrix.com/article/CTX111614
http://support.citrix.com/article/CTX111615
http://www.securityfocus.com/bid/21080
http://www.vupen.com/english/advisories/2006/4525
https://exchange.xforce.ibmcloud.com/vulnerabilities/30302
https://exchange.xforce.ibmcloud.com/vulnerabilities/30303
http://secunia.com/advisories/22909
http://securitytracker.com/id?1017227
http://support.citrix.com/article/CTX111614
http://support.citrix.com/article/CTX111615

Get alerted when CVE-2006-6572 or the next vulnerability affects your stack