PT-2005-1851 · Citrix · Citrix Metaframe Password Manager

Published 2005-03-20 · Updated 2008-09-05 · CVE-2005-0822

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix Metaframe Password Manager versions 2.5 and earlier

Description The issue allows users to view their secondary passwords, even if it is not allowed by policy, because the password is stored in cleartext, although it is obfuscated when presented to the user.

Recommendations For versions 2.5 and earlier, consider restricting access to the password storage mechanism to minimize the risk of unauthorized password viewing. As a temporary workaround, review and enforce password policies to limit potential exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0822

Affected Products

Citrix Metaframe Password Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-0822 · Security Note
• http://support.citrix.com/kb/entry.jspa?externalID=CTX105762 · Vendor Advisory
• http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254 · Vendor Advisory
• http://securityfocus.com/bid/24041 · Note
• http://support.citrix.com/article/CTX105800 · Note
• http://securitytracker.com/id?1018077 · Note