Description
Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.
References
- 4142 vdb-entry
- 20020220 Re: Citrix NFuse 1.6 - additional network exposure mailing-list