CVE-2008-2300

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-05-18 · updated 2026-06-16
Weakness: CWE-264

Description

Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0 allows remote authenticated users to access unauthorized desktops via unknown attack vectors.

Affected products

Citrix Access Essentials: through 2.0; 1.0, 1.5 (and their updates)
Citrix Presentation Server: through 4.5
Citrix Desktop Server: 1.0 (and their updates)
Citrix Metaframe Presentation Server: 4.0 (and their updates)

References

http://secunia.com/advisories/30271
http://support.citrix.com/article/CTX116941
http://www.securityfocus.com/bid/29232
http://www.securitytracker.com/id?1020027
http://www.vupen.com/english/advisories/2008/1530/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42439
http://secunia.com/advisories/30271
http://support.citrix.com/article/CTX116941
http://www.securityfocus.com/bid/29232
http://www.securitytracker.com/id?1020027
http://www.vupen.com/english/advisories/2008/1530/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42439

Get alerted when CVE-2008-2300 or the next vulnerability affects your stack