CVE-2009-2453

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-07-14 · updated 2026-06-16
Weakness: CWE-264

Description

Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.

Affected products

Citrix Presentation Server: 4.5-fp1; 4.5
Citrix Xenapp: 4.5-fp3

References

http://osvdb.org/53900
http://secunia.com/advisories/34865
http://support.citrix.com/article/CTX118792
http://www.securityfocus.com/bid/34691
http://www.securitytracker.com/id?1022114
http://www.vupen.com/english/advisories/2009/1154
http://osvdb.org/53900
http://secunia.com/advisories/34865
http://support.citrix.com/article/CTX118792
http://www.securityfocus.com/bid/34691
http://www.securitytracker.com/id?1022114
http://www.vupen.com/english/advisories/2009/1154

Get alerted when CVE-2009-2453 or the next vulnerability affects your stack