Unrated severityNVD Advisory· Published May 18, 2008· Updated Jun 16, 2026

CVE-2008-2299

Description

Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.

Affected products

Citrix Systems/Access Essentials2 versions
cpe:2.3:a:citrix:access_essentials:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:citrix:access_essentials:*:*:*:*:*:*:*:*range: <=2.0
- (no CPE)range: <=2.0
Citrix Systems/Desktop Server2 versions
cpe:2.3:a:citrix:desktop_server:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:citrix:desktop_server:1.0:*:*:*:*:*:*:*
- (no CPE)range: <=1.0
Citrix Systems/Metaframe Presentation Server
cpe:2.3:a:citrix:presentation_server:*:*:*:*:*:*:*:*
Range: <=4.5
Citrix Systems/Presentation Server Clientllm-fuzzy
Range: <=4.5

Patches

Vulnerability mechanics

References

support.citrix.com/article/CTX114893nvdPatch
www.securitytracker.com/idnvdPatch
secunia.com/advisories/30271nvdVendor Advisory
www.securityfocus.com/bid/29233nvd
www.vupen.com/english/advisories/2008/1531/referencesnvd
exchange.xforce.ibmcloud.com/vulnerabilities/42444nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000