CVE-2008-6830

MEDIUM 4.0CVE-2008-6830 · Published 08/06/2009 · updated 16/06/2026

In short

CVE-2008-6830 is a MEDIUM (CVSS 4.0) vulnerability affecting web interface (citrix).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
web interface citrix	`= 5.0= 5.0.1`	No fix yet

Description

The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.

References

osvdb.org/49387 · Patch
secunia.com/advisories/32444 · Vendor Advisory
support.citrix.com/article/CTX118768 · Patch
securityfocus.com/bid/31943
securitytracker.com/id
vupen.com/english/advisories/2008/2946 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/46135

More vulnerabilities in web interface

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free