CVE-2009-2213

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-25 · updated 2026-06-16
Weakness: CWE-863

Description

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.

Affected products

Citrix Netscaler Access Gateway: all versions
Citrix Netscaler Access Gateway Firmware: through 8.1; 7.0, 8.0, 9.0 (and their updates)

References

http://support.citrix.com/article/CTX118770
http://www.securityfocus.com/bid/35422
http://www.vupen.com/english/advisories/2009/1641
https://exchange.xforce.ibmcloud.com/vulnerabilities/51274
http://support.citrix.com/article/CTX118770
http://www.securityfocus.com/bid/35422
http://www.vupen.com/english/advisories/2009/1641
https://exchange.xforce.ibmcloud.com/vulnerabilities/51274

Get alerted when CVE-2009-2213 or the next vulnerability affects your stack