{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T09:20:30.412","vulnerabilities":[{"cve":{"id":"CVE-2009-3936","sourceIdentifier":"cve@mitre.org","published":"2009-11-13T16:30:00.233","lastModified":"2026-06-16T23:12:39.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555."},{"lang":"es","value":"Vulnerabilidad no especificada en Citrix Online Plug-in para Windows 11.0.x en versiones anteriores a la 11.0.150 y 11.x en versiones anteriores a la 11.2, Online Plug-in para Mac en versiones anteriores a la 11.0, Receiver para iPhone en versiones anteriores a la 1.0.3, y cliente ICA Java, Mac, UNIX, y Windows para XenApp y XenDesktop permite a atacantes remotos hacerse pasar por el servidor SSL/TLS y eludir la autenticación mediante un certificado manipulado, una vulnerabilidad diferente a CVE-2009-3555."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:online_plug-in_for_mac:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0","matchCriteriaId":"37D7F410-F5F1-45C7-B94A-C686DAD3A772"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:online_plug-in_for_windows:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2","matchCriteriaId":"23248B20-806F-4E90-B100-3F1DA30A00F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:online_plug-in_for_windows:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D89732A8-CD0E-4F6D-9CAE-293263DF64D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:online_plug-in_for_windows:11.1:*:*:*:*:*:*:*","matchCriteriaId":"B27EE2C0-698D-49C6-88C5-EB9F9536E3B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:receiver_for_iphone:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"93B95DE7-F3AE-4B41-966E-0F56834228A0"}]}]}],"references":[{"url":"http://secunia.com/advisories/37319","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX123248","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37073","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1023168","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3206","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54213","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX123248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}