CVE-2008-6830
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does...
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.
Exploit likelihood
What each source reports
NVD Score used
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.
- Record
CVE-2008-6830- CVSS 2.0
- 4.0 Medium
AV:N/AC:H/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.
- Record
CVE-2008-6830- Updated
- 2026-11-02
EUVDEUVD-2008-6790 No score
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.
- Record
EUVD-2008-6790- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7gq8-rx89-j29p No score
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does...
The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.
- Record
GHSA-7gq8-rx89-j29p- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6830 is a medium vulnerability (CVSS 4.0) in Citrix Web Interface, published June 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/46135
osvdb.org/49387
vupen.com/english/advisories/2008/2946
securitytracker.com/id?1021110
support.citrix.com/article/CTX118768
secunia.com/advisories/32444
securityfocus.com/bid/31943
nvd.nist.gov/vuln/detail/CVE-2008-6830
github.com/advisories/GHSA-7gq8-rx89-j29p