PT-2004-2800 · Citrix · Citrix Metaframe Password Manager

David Wong + 1 · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1902

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix MetaFrame Password Manager version 2.0

Description The issue concerns the encryption of passwords entered after executing the First Time User Wizards when a central credential store is not configured. This allows local users to obtain sensitive information.

Recommendations For Citrix MetaFrame Password Manager version 2.0, consider configuring a central credential store to ensure passwords are encrypted properly. As a temporary workaround, restrict access to sensitive information until a proper configuration is in place.

Fix

Related Identifiers

CVE-2004-1902

Affected Products

Citrix Metaframe Password Manager

References · 8

• http://secunia.com/advisories/11293 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-1902 · Security Note
• http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256 · Vendor Advisory
• http://securityfocus.com/bid/10049 · Patch
• http://marc.info/?l=bugtraq&m=108127948610311&w=2 · Note
• http://osvdb.org/4942 · Note
• http://securitytracker.com/id?1009659 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15737 · Note