CVE-2008-6830 Auth bypass in n/a

Medium 4.0 Published 8 Jun 2009 Updated 7 Aug 2024

Attackers with valid credentials and browser access can hijack Citrix Web Interface sessions due to improper session termination.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2008-6830?

CVE-2008-6830 is a medium-severity authentication bypass vulnerability in n/a, published on 8 Jun 2009. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.

Which versions are affected by CVE-2008-6830?

It affects 1 product.

Products include Citrix Web Interface.

How do I fix CVE-2008-6830?

No fix has been published for CVE-2008-6830 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2008-6830 being exploited?

There is no known exploitation of CVE-2008-6830 in the wild and no public exploit code.

Sources

Also known as GHSA-7gq8-rx89-j29p.