CVE-2008-2299

no score yetEPSS 1.1%

Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2008-05-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

citrix:access_essentials
citrix:desktop_server
citrix:presentation_server

References

http://secunia.com/advisories/30271
http://support.citrix.com/article/CTX114893
http://www.securityfocus.com/bid/29233
http://www.securitytracker.com/id?1020026
http://www.vupen.com/english/advisories/2008/1531/references

Check your stack JSON