PT-2005-1851 · Citrix · Citrix Metaframe Password Manager

Publicado 2005-03-20 · Atualizado 2008-09-05 · CVE-2005-0822

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix Metaframe Password Manager versions 2.5 and earlier

Description The issue allows users to view their secondary passwords, even if it is not allowed by policy, because the password is stored in cleartext, although it is obfuscated when presented to the user.

Recommendations For versions 2.5 and earlier, consider restricting access to the password storage mechanism to minimize the risk of unauthorized password viewing. As a temporary workaround, review and enforce password policies to limit potential exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-0822

Produtos afetados

Citrix Metaframe Password Manager

Referências · 6

• http://securityfocus.com/bid/24041 · Nota
• http://support.citrix.com/article/CTX105800 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0822 · Nota de Segurança
• http://securitytracker.com/id?1018077 · Nota
• http://support.citrix.com/kb/entry.jspa?externalID=CTX105762 · Aviso do Fabricante
• http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254 · Aviso do Fabricante