CVE:CVE-2006-6572
CNNVD:CNNVD-200612-363
Citrix Advanced Access Control (AAC) Option 4.0和Access Gateway 4.2 with Advanced Access Control 4.2的20061114之前版本存在未明漏洞，当Browser-Only访问功能启用时，远程认证用户可通过特定登录方法来绕过访问策略。
solution:Upgrade citrix access_gateway to a higher version than 4.0,4.2,and avoid the version 4.0,4.2