Description
The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information.
Metrics
CVSS 2.0 2.1/10
AV:L/AC:L/Au:N/C:P/I:N/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://marc.info/?l=bugtraq&m=108127948610311&w=2
- http://secunia.com/advisories/11293Patch
- http://securitytracker.com/id?1009659
- http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256Patch, Vendor Advisory
- http://www.osvdb.org/4942
- http://www.securityfocus.com/bid/10049Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15737
- http://marc.info/?l=bugtraq&m=108127948610311&w=2
- http://secunia.com/advisories/11293Patch
- http://securitytracker.com/id?1009659
- http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256Patch, Vendor Advisory
- http://www.osvdb.org/4942
- http://www.securityfocus.com/bid/10049Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15737
Timeline
- Published
- Dec 31, 2004
- Last modified
- Jun 16, 2026
- NVD status
- Modified