CVE-2008-2299

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-05-18 · updated 2026-06-16
Weakness: CWE-310

Description

Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.

Affected products

Citrix Access Essentials: through 2.0
Citrix Desktop Server: 1.0
Citrix Presentation Server: through 4.5

References

http://secunia.com/advisories/30271
http://support.citrix.com/article/CTX114893
http://www.securityfocus.com/bid/29233
http://www.securitytracker.com/id?1020026
http://www.vupen.com/english/advisories/2008/1531/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42444
http://secunia.com/advisories/30271
http://support.citrix.com/article/CTX114893
http://www.securityfocus.com/bid/29233
http://www.securitytracker.com/id?1020026
http://www.vupen.com/english/advisories/2008/1531/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42444

Get alerted when CVE-2008-2299 or the next vulnerability affects your stack