{"api_version":"1","generated_at":"2026-07-23T09:31:38+00:00","cve":"CVE-2008-2528","urls":{"html":"https://cve.report/CVE-2008-2528","api":"https://cve.report/api/cve/CVE-2008-2528.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-2528","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-2528"},"summary":{"title":"CVE-2008-2528","description":"Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain \"access to network resources\" via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-06-03 15:32:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-287","NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://secunia.com/advisories/30175","name":"http://secunia.com/advisories/30175","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Citrix Access Gateway Unspecified Authentication Bypass - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/29174","name":"http://www.securityfocus.com/bid/29174","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Citrix Access Gateway Standard and Advanced Edition Unspecified Authentication Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2008/1474/references","name":"http://www.vupen.com/english/advisories/2008/1474/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42356","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42356","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1020025","name":"http://www.securitytracker.com/id?1020025","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Citrix Access Gateway Lets Remote Users Bypass Authentication - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.citrix.com/article/CTX116930","name":"http://support.citrix.com/article/CTX116930","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Vulnerability in Access Gateway Standard Edition and Advanced Edition appliance firmware could result in authentication bypass","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2528","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2528","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"2528","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"citrix","cpe5":"access_gateway","cpe6":"4.5.5","cpe7":"*","cpe8":"standard","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2528","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"citrix","cpe5":"access_gateway","cpe6":"4.5.6","cpe7":"*","cpe8":"standard","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2528","vulnerable":"1","versionEndIncluding":"4.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"citrix","cpe5":"access_gateway","cpe6":"*","cpe7":"advanced","cpe8":"hf2","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2528","vulnerable":"1","versionEndIncluding":"4.5.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"citrix","cpe5":"access_gateway","cpe6":"*","cpe7":"*","cpe8":"standard","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:05:30.208Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"29174","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/29174"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.citrix.com/article/CTX116930"},{"name":"ADV-2008-1474","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1474/references"},{"name":"30175","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30175"},{"name":"1020025","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1020025"},{"name":"citrix-access-unspecified-auth-bypass(42356)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42356"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-05-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain \"access to network resources\" via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"29174","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/29174"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.citrix.com/article/CTX116930"},{"name":"ADV-2008-1474","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1474/references"},{"name":"30175","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30175"},{"name":"1020025","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1020025"},{"name":"citrix-access-unspecified-auth-bypass(42356)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42356"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-2528","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain \"access to network resources\" via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"29174","refsource":"BID","url":"http://www.securityfocus.com/bid/29174"},{"name":"http://support.citrix.com/article/CTX116930","refsource":"CONFIRM","url":"http://support.citrix.com/article/CTX116930"},{"name":"ADV-2008-1474","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1474/references"},{"name":"30175","refsource":"SECUNIA","url":"http://secunia.com/advisories/30175"},{"name":"1020025","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1020025"},{"name":"citrix-access-unspecified-auth-bypass(42356)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42356"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-2528","datePublished":"2008-06-03T15:00:00.000Z","dateReserved":"2008-06-03T00:00:00.000Z","dateUpdated":"2024-08-07T09:05:30.208Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-06-03 15:32:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-287","NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:*:advanced:hf2:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"DCD35E50-E0CF-4FDA-9101-7243926EA8B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*","versionEndIncluding":"4.5.7","matchCriteriaId":"7C22982D-8CEC-4DAB-9F94-1D30895C186F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:4.5.5:*:standard:*:*:*:*:*","matchCriteriaId":"94618DF7-4882-4205-89F2-DD8B22BB9D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:4.5.6:*:standard:*:*:*:*:*","matchCriteriaId":"3EAEF2D7-EBE5-4B14-AE70-24B2C4770287"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"2528","Ordinal":"1","Title":"CVE-2008-2528","CVE":"CVE-2008-2528","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"2528","Ordinal":"1","NoteData":"Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain \"access to network resources\" via unspecified vectors.","Type":"Description","Title":"CVE-2008-2528"},{"CveYear":"2008","CveId":"2528","Ordinal":"2","NoteData":"2008-06-03","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"2528","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}