Description
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.
References (5)
Core 5
Core References
Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX105800
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1018077
Patch, Vendor Advisory x_refsource_confirm
http://support.citrix.com/kb/entry.jspa?externalID=CTX105762
Vendor Advisory x_refsource_confirm
http://support.citrix.com/kb/entry.jspa?entryID=5970&categoryID=254
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24041
Scores
EPSS
0.0010
EPSS Percentile
28.0%
Details
Status
published
Products (1)
citrix/metaframe_password_manager
2.5
Published
May 02, 2005
Tracked Since
Feb 18, 2026