PT-2004-2800 · Citrix · Citrix Metaframe Password Manager

David Wong + 1 · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1902

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix MetaFrame Password Manager version 2.0

Description The issue concerns the encryption of passwords entered after executing the First Time User Wizards when a central credential store is not configured. This allows local users to obtain sensitive information.

Recommendations For Citrix MetaFrame Password Manager version 2.0, consider configuring a central credential store to ensure passwords are encrypted properly. As a temporary workaround, restrict access to sensitive information until a proper configuration is in place.

Correção

Identificadores relacionados

CVE-2004-1902

Produtos afetados

Citrix Metaframe Password Manager

Referências · 8

• http://secunia.com/advisories/11293 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2004-1902 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=108127948610311&w=2 · Nota
• http://osvdb.org/4942 · Nota
• http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256 · Aviso do Fabricante
• http://securityfocus.com/bid/10049 · Correção
• http://securitytracker.com/id?1009659 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15737 · Nota