CVE-2004-1902

Description

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/15737

http://www.securityfocus.com/bid/10049

http://www.osvdb.org/4942

http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256

http://securitytracker.com/id?1009659

http://secunia.com/advisories/11293

http://marc.info/?l=bugtraq&m=108127948610311&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS