Unscored CVE-2004-1902 EUVD-2004-1895GHSA-qm6f-p4vv-g3v5

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediatel…

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information.

References

http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256
4942 vdb-entry
1009659 vdb-entry
10049 vdb-entry
metaframe-wizard-info-disclosure(15737) vdb-entry
11293 third-party-advisory
20040406 Foundstone Labs Advisory: Citrix MetaFrame Password Manager 2.0 mailing-list