Description
The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or browser cache.
References
- ADV-2007-2583 vdb-entry
- 26143 third-party-advisory
- 24975 vdb-entry
- 45288 vdb-entry
- 1018435 vdb-entry
- citrix-access-unspeci-information-disclosure(35510) vdb-entry
- http://support.citrix.com/article/CTX112803
- 20071022 Corsaire Security Advisory - Citrix Access Gateway session ID disclosure issue mailing-list
- http://support.citrix.com/article/CTX113814