Description
Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.
References
- http://support.citrix.com/article/CTX115281
- edgesight-configuration-file-info-disclosure(38861) vdb-entry
- ADV-2007-4091 vdb-entry
- 1019050 vdb-entry
- 26705 vdb-entry
- 27935 third-party-advisory