{"schemaVersion":3,"id":"CVE-2008-2299","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass intended restrictions.","dates":{"published":"2008-05-18T14:00:00.000Z","modified":"2024-08-07T08:58:00.820Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01069,"percentile":0.643,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01069},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01069,"percentile":0.643}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01069,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01069,"percentile":0.643}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"citrix","product":"access_essentials","name":"access essentials","label":"access_essentials","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0","eol":null,"hubHref":"/vendor/citrix/access_essentials"},{"vendor":"citrix","product":"desktop_server","name":"desktop server","label":"desktop_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0","eol":null,"hubHref":"/vendor/citrix/desktop_server"},{"vendor":"citrix","product":"presentation_server","name":"presentation server","label":"presentation_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.5","eol":null,"hubHref":"/vendor/citrix/presentation_server"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.vupen.com/english/advisories/2008/1531/references","label":"www.vupen.com/english/advisories/2008/1531/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://support.citrix.com/article/CTX114893","label":"support.citrix.com/article/CTX114893","hostname":"support.citrix.com","tags":["X Refsource CONFIRM","Patch"]},{"url":"http://secunia.com/advisories/30271","label":"secunia.com/advisories/30271","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/29233","label":"www.securityfocus.com/bid/29233","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.securitytracker.com/id?1020026","label":"www.securitytracker.com/id?1020026","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42444","label":"exchange.xforce.ibmcloud.com/vulnerabilities/42444","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-05-18T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T08:58:00.820Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":20,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:22:47.061Z","stale":false,"partial":false}}