Welcome to Citrix Guide. I hope you find our citrix articles useful

citrix

Severity: Medium
Description of Problem
When using Advanced Access Control, users that login in a specific way may be able to gain access to resources in violation of configured policies.
This vulnerability is present in:

• Access Gateway 4.2 with Advanced Access Control 4.2 (currently known as Access Gateway 4.2 Advanced Edition)
• Advanced Access Control Option 4.0 (previously Access Gateway Enterprise 4.0)

Access Gateway Standard Edition and Access Gateway Enterprise Edition are not vulnerable to this issue.
What Customers Should Do
A hotfix has been released to address this issue. Citrix recommends that affected customers install the hotfix which can be downloaded from the following locations:
Advanced Access Control Option 4.0:
EN - http://support.citrix.com/article/CTX110293
FR - http://support.citrix.com/article/CTX111605
GE - http://support.citrix.com/article/CTX111603
JA - http://support.citrix.com/article/CTX111606
ES - http://support.citrix.com/article/CTX111604
Access Gateway 4.2 Advanced Edition:
EN - http://support.citrix.com/article/CTX110439
FR - http://support.citrix.com/article/CTX111609
GE - http://support.citrix.com/article/CTX111607
JA - http://support.citrix.com/article/CTX111610
ES - http://support.citrix.com/article/CTX111608
What Citrix Is Doing
Citrix is proactively notifying customers and channel partners about this potential security issue. An article containing the information in this bulletin is available from the Citrix Knowledge Base at http://support.citrix.com/.
Obtaining Support on this Issue
If you require technical assistance with this issue, please contact Citrix Technical Support. Information for contacting Citrix Technical Support is available at http://support.citrix.com/.
Reporting Security Vulnerabilities to Citrix
Citrix welcomes input regarding the security of its products and considers any and all potential vulnerabilities very seriously. If you would like to report a security issue to Citrix, please compose an e-mail to secure@citrix.com containing the exact version of the product in which the vulnerability was found and steps to reproduce the vulnerability.

Source