{"api_version":"1","generated_at":"2026-07-23T15:09:30+00:00","cve":"CVE-2006-4846","urls":{"html":"https://cve.report/CVE-2006-4846","api":"https://cve.report/api/cve/CVE-2006-4846.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4846","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4846"},"summary":{"title":"CVE-2006-4846","description":"Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-09-19 01:07:00","updated_at":"2017-07-20 01:33:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://support.citrix.com/article/CTX110950","name":"http://support.citrix.com/article/CTX110950","refsource":"CONFIRM","tags":["Patch"],"title":"LDAP authentication vulnerability in Access Gateway Advanced Access Control","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/658620","name":"VU#658620","refsource":"CERT-VN","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#658620","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016874","name":"1016874","refsource":"SECTRACK","tags":["Patch"],"title":"SecurityTracker.com Archives - Citrix Access Gateway LDAP Authentication Flaw Grants Access to Remote Users","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/28938","name":"28938","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28990","name":"citrix-acc-ldap-auth-bypass(28990)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3643","name":"ADV-2006-3643","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21941","name":"21941","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Citrix Access Gateway Advanced Access Control Authentication Bypass - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20066","name":"20066","refsource":"BID","tags":["Patch"],"title":"Citrix Access Gateway AAC LDAP Authentication Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://support.citrix.com/article/CTX110439","name":"http://support.citrix.com/article/CTX110439","refsource":"CONFIRM","tags":["Patch"],"title":"404 - Page not found","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4846","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4846","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4846","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"citrix","cpe5":"access_gateway","cpe6":"4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4846","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"citrix","cpe5":"access_gateway","cpe6":"4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4846","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1016874","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016874"},{"name":"ADV-2006-3643","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3643"},{"name":"VU#658620","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/658620"},{"name":"20066","refsource":"BID","url":"http://www.securityfocus.com/bid/20066"},{"name":"http://support.citrix.com/article/CTX110950","refsource":"CONFIRM","url":"http://support.citrix.com/article/CTX110950"},{"name":"21941","refsource":"SECUNIA","url":"http://secunia.com/advisories/21941"},{"name":"citrix-acc-ldap-auth-bypass(28990)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28990"},{"name":"28938","refsource":"OSVDB","url":"http://www.osvdb.org/28938"},{"name":"http://support.citrix.com/article/CTX110439","refsource":"CONFIRM","url":"http://support.citrix.com/article/CTX110439"}]}},"nvd":{"publishedDate":"2006-09-19 01:07:00","lastModifiedDate":"2017-07-20 01:33:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"severity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:citrix:access_gateway:4.2:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4846","Ordinal":"20186","Title":"CVE-2006-4846","CVE":"CVE-2006-4846","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4846","Ordinal":"1","NoteData":"Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4846","Ordinal":"2","NoteData":"2006-09-18","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4846","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}