PT-2002-1370 · Citrix · Citrix Nfuse

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0301

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix NFuse version 1.6

Description The issue allows remote attackers to bypass authentication and obtain sensitive information. This is achieved by directly calling the "launch.asp" endpoint with invalid NFUSE USER and NFUSE PASSWORD parameters.

Recommendations For Citrix NFuse version 1.6, consider restricting access to the "launch.asp" endpoint until a patch is available. As a temporary workaround, avoid using the NFUSE USER and NFUSE PASSWORD parameters in the affected endpoint to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0301

Produtos afetados

Citrix Nfuse

Referências · 3

• http://securityfocus.com/bid/4142 · Nota
• http://marc.info/?l=bugtraq&m=101424947801895&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0301 · Nota de Segurança