vulnerability announce CVE-2009-2454

Citrix Web Interface: Cross Site Scripting

Synthesis of the vulnerability

An attacker can generate a Cross Site Scripting in Citrix Web Interface.

Severity: 2/4. Creation date: 29/04/2009.

Impacted products

• Citrix XenApp
• Citrix XenDesktop

Description of the vulnerability

The Citrix Web Interface (CWI) product can be installed to work with XenApp and XenDesktop. An attacker can generate a Cross Site Scripting in Citrix Web Interface. Technical details are unknown.

Share this bulletin

Complete Vigil@nce bulletin

Citrix Web Interface: Cross Site Scripting

Characteristics

Title: Citrix Web Interface: Cross Site Scripting. Keywords: CWI Citrix Cross Interface Scripting Site Web XenApp XenDesktop. Identifiers: BID-34761, CTX120697, CVE-2009-2454, VIGILANCE-VUL-8682.

Information sources

Publications and announces Source example: Cross-Site Scripting Vulnerability in Citrix Web Interface

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

Vigil@nce provides systems vulnerabilities bulletins. The Vigil@nce security watch publishes vulnerability bulletins about threats impacting the information system. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system. Each administrator can customize the list of products for which he wants to receive vulnerability alerts.