PT-2007-7142 · Citrix · Netscaler+2

Publicado 2007-12-07 · Atualizado 2017-08-08 · CVE-2007-6267

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix EdgeSight versions 4.2 through 4.5 for Presentation Server Citrix EdgeSight versions 4.2 through 4.5 for Endpoints Citrix EdgeSight for NetScaler versions 1.0 through 1.1

Description The issue allows local users to obtain sensitive database credentials due to improper storage in configuration files.

Recommendations For Citrix EdgeSight versions 4.2 through 4.5 for Presentation Server, consider restricting access to configuration files until a proper fix is applied. For Citrix EdgeSight versions 4.2 through 4.5 for Endpoints, restrict access to configuration files to minimize the risk of exploitation. For Citrix EdgeSight for NetScaler versions 1.0 through 1.1, avoid using sensitive database credentials in configuration files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2007-6267

Produtos afetados

Citrix Edgesight

Netscaler

Presentation Server

Referências · 7

• 🔥 http://securityfocus.com/bid/26705 · Exploit
• http://secunia.com/advisories/27935 · Aviso do Fabricante
• http://support.citrix.com/article/CTX115281 · Correção
• http://securitytracker.com/id?1019050 · Nota
• http://vupen.com/english/advisories/2007/4091 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6267 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38861 · Nota