CVE-2002-0301

Citrix NFuse 1.6 - Unauthenticated Authentication Bypass via Invalid Credentials

Title source: llm
STIX 2.1

Description

Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4142
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=101424947801895&w=2

Scores

EPSS 0.0062
EPSS Percentile 70.2%

Details

Status published
Products (1)
citrix/nfuse 1.6
Published May 31, 2002
Tracked Since Feb 18, 2026