CVE-2006-6572: Citrix Access Gateway

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114, when the Browser-Only access feature is enabled, allows remote authenticated users to bypass access policies via a certain login method, a different issue than CVE-2006-4846. NOTE: some of these details are obtained from third party information.

Affected products

• Citrix Access Gateway: version 4.0 only; version 4.2 only

Published 2006-12-15. Last modified 2026-06-16.