CVE-2004-1902

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256	Patch Vendor Advisory
http://www.securityfocus.com/bid/10049	Patch
http://secunia.com/advisories/11293	Patch
http://www.osvdb.org/4942
http://securitytracker.com/id?1009659
http://marc.info/?l=bugtraq&m=108127948610311&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/15737

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:citrix:metaframe_password_manager:2.0:*:*:*:*:*:*:*

Information

Published : 2004-12-30 21:00

Updated : 2017-07-10 18:31

NVD link : CVE-2004-1902

Mitre link : CVE-2004-1902

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

citrix

metaframe_password_manager

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256", "name": "http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/10049", "name": "10049", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/11293", "name": "11293", "tags": ["Patch"], "refsource": "SECUNIA"}, {"url": "http://www.osvdb.org/4942", "name": "4942", "tags": [], "refsource": "OSVDB"}, {"url": "http://securitytracker.com/id?1009659", "name": "1009659", "tags": [], "refsource": "SECTRACK"}, {"url": "http://marc.info/?l=bugtraq&m=108127948610311&w=2", "name": "20040406 Foundstone Labs Advisory: Citrix MetaFrame Password Manager 2.0", "tags": [], "refsource": "BUGTRAQ"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15737", "name": "metaframe-wizard-info-disclosure(15737)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-1902", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2004-12-31T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:citrix:metaframe_password_manager:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-11T01:31Z"}